Skip to main content

Release 0.5.9 — Slack Channel Management, Ownership Transfer, and RBAC Hardening

Sri Aradhyula
Sri Aradhyula

Released: 2026-06-05 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.9 Previous release: 0.5.8

Highlights​

0.5.9 rounds out Slack channel management (channel delete, in-place agent swap, config-team import), introduces unified ownership-transfer flows across agents, RAG knowledge bases, and MCP tools, and hardens local-dev RBAC so the org-admin bypass and Slack channel visibility work correctly out of the box. RAG embeddings are now preserved across non-interactive upgrades in setup-caipe.sh.

What's New​

Slack​

  • Channel delete — admins can delete channel-team bindings from the Slack Channels panel (#1749)
  • Editable agent swap in route editor — the channel route editor now allows swapping the assigned agent without removing and re-adding the route (#1749)
  • Config-team import — a channel's team binding can be imported from an optional config_team field in the sync-from-config preview, reducing manual wiring for large Slack workspace setups
  • Channel access gated on agent assignment — channel access now requires agent assignment, not just team membership, preventing phantom channel entries (#1761)

RBAC / Ownership​

  • Unified ownership-transfer flow — transferring ownership of agents, RAG knowledge bases, and MCP tools uses a shared code path; OpenFGA tuples are correctly rewritten on transfer (#1726)
  • Skill team shares via shared module — skill team shares reconcile through reconcileShareableResource, matching the pattern used by agents and RAG KBs (#1729)

AgentGateway / Keycloak​

  • Remove unsupported extAuthz timeout field — the field caused AgentGateway startup warnings; removed from the chart (#1722)
  • Add impersonation role to caipe-platform desired roles — the service account now correctly requests the impersonation Keycloak realm role (#1722)

Setup​

  • Preserve RAG embeddings on non-interactive upgrade — setup-caipe.sh no longer resets the embeddings model when upgrading without --embeddings-model (#1717)
  • Wire OLLAMA_BASE_URL for in-cluster Ollama embeddings — fixes missing env var when Ollama is deployed in-cluster

Bug Fixes​

  • skills: resolve undefined skill id on create/clone redirect
  • local-dev: seed agent team grants and fix RBAC deny test path
  • local-dev: org-admin bypass, Slack channel admin visibility, agentgateway version pin, slack-bot logging

Breaking Changes​

None. Drop-in upgrade from 0.5.8.

Upgrade​

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.9 \
  -f your-values.yaml

Upgrade Guide: 0.5.8 → 0.5.9​

No mandatory values.yaml changes. No data migrations required for existing deployments.

If you use Slack channel management, existing channel-team bindings are unaffected. The new agent-assignment gate applies going forward; channels with no agent assigned will show as unrouted until an agent is set.