release(aisix-cp): 0.5.0

[jarvis9443]

Releases aisix-cp 0.5.0. Bumps version and appVersion to 0.5.0, syncs the control-plane chart deltas accumulated since 0.4.0, and regenerates README.md.

Synced from the control-plane chart

• api.notifyAllowPrivateURLs (default false) gates a new AISIX_CLOUD_NOTIFY_ALLOW_PRIVATE_URLS env var on the cp-api container. Budget alert notification channels (webhook / Slack) block private and internal addresses by default as an SSRF guard; private deployments whose webhook receiver lives on an intranet the cp-api pod can route to need this switch.
• UI .next/cache volume — the dashboard container mounts an emptyDir at /app/.next/cache. Next.js standalone writes its image and fetch cache there; under readOnlyRootFilesystem every write fails, and a failed write can permanently wedge the in-flight dedup entry for an image variant, so those requests hang until the load balancer times out.

Preserved public adaptations

Unchanged and still divergent from the control-plane chart by design: docker.io registries, empty image tags resolving to .Chart.AppVersion, the always-emitted api.dpImage default (docker.io/api7/aisix:<appVersion>), and this chart's README.md.

Verification

helm lint passes. Rendered templates resolve every image to docker.io/...:0.5.0 and AISIX_CLOUD_DP_IMAGE to docker.io/api7/aisix:0.5.0; all four images are published. The new env var renders only when the value is enabled, and the UI volume and mount render as expected.

Merging publishes aisix-cp-0.5.0 to charts.api7.ai.

Summary by CodeRabbit

• New Features

  • Added an option to allow notification webhooks to target private or internal URLs, disabled by default.
  • Added writable runtime caching for the web interface to improve reliability in read-only container environments.

• Documentation

  • Updated chart version information and documented the new notification URL setting.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: fdb6e282-a18a-4269-9e73-d11343159fe5

📥 Commits

Reviewing files that changed from the base of the PR and between 794c9cc and 7b422fa.

📒 Files selected for processing (5)

• charts/aisix-cp/Chart.yaml
• charts/aisix-cp/README.md
• charts/aisix-cp/templates/api-deployment.yaml
• charts/aisix-cp/templates/ui-deployment.yaml
• charts/aisix-cp/values.yaml

---

📝 Walkthrough

Walkthrough

The AISIX control plane Helm chart is bumped to version 0.5.0, adds an API option for allowing private notification URLs, and conditionally exposes it to the API container. The UI deployment also gains a writable Next.js cache volume.

Changes

AISIX control plane chart

Layer / File(s)	Summary
Notification URL configuration charts/aisix-cp/values.yaml, charts/aisix-cp/templates/api-deployment.yaml, charts/aisix-cp/README.md, charts/aisix-cp/Chart.yaml	Adds api.notifyAllowPrivateURLs with default false, conditionally sets AISIX_CLOUD_NOTIFY_ALLOW_PRIVATE_URLS, documents the value, and updates chart/app versions to 0.5.0.
Writable UI cache storage charts/aisix-cp/templates/ui-deployment.yaml	Mounts an emptyDir volume named next-cache at /app/.next/cache in the UI container.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
E2e Test Quality Review	⚠️ Warning	FAIL: aisix-cp is only linted in CI; there’s no install/E2E coverage for the new notify env var or Next.js cache mount, so runtime regressions can slip through.	Add a chart install/render E2E job for aisix-cp covering default and enabled api.notifyAllowPrivateURLs, plus UI pod volume/mount assertions.

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: releasing aisix-cp version 0.5.0.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Security Check	✅ Passed	No security issues found: the new private-URL env var is opt-in/default-false, and the UI cache change is a benign emptyDir mount in Helm templates.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-aisix-cp-0.5.0

---

_{Comment @coderabbitai help to get the list of available commands.}