v2.0.0

[2.0.0] - 2026-07-31

Added

• (admin-cli) Add usage examples to all commands; restructure browse (NVIDIA#2221)
• (admin-cli) Rename binary to nico-admin-cli; restructure operator docs (NVIDIA#2339)
• (admin-cli) Add rack state-history command (NVIDIA#2830)
• (admin-cli) Inspect a machine's MachineBootInterface across its lifecycle (NVIDIA#2865)
• (api) Add admin force-delete for racks (NVIDIA#2043)
• (api) Introduce VPC prefix lifecycle (NVIDIA#2199)
• (api) Include additional state details in DpuInfo (NVIDIA#2234)
• (api) Add host firmware config delete endpoint (NVIDIA#3018)
• (api) Link switches and power shelves to their BMC via machine_interfaces (NVIDIA#3033)
• (api) Add dual-stack FNN allocation and IPv6 static-assignment support (NVIDIA#2751)
• (api-core) Add forge agent control integration coverage (NVIDIA#3039)
• (api-model) Parse UEFI device paths with 1..N PCI nodes (NVIDIA#1977)
• (api-web) Add/remove SKU from a machine in admin UI (NVIDIA#2295)
• (api-web) Surface unset default credentials in admin UI (NVIDIA#2292)
• (bmc-mock) Model the BlueField DPU/NIC mode flip (NVIDIA#2689)
• (bmc-mock) Add configurable MAC address pools (NVIDIA#2868)
• (bmc-mock) Add Dell R760 BF4 hardware scaffolding (NVIDIA#2902)
• (ci) Use tag for uploaded version (NVIDIA#3229) (NVIDIA#3357)
• (component-manager) Wire power shelf and switch controllers thro… (NVIDIA#2198)
• (component-manager) Wire compute tray management through RMS bac… (NVIDIA#2418)
• (core) Add Grype scan for shipped containers on PR builds (NVIDIA#2596)
• (credential-rotation) Stage site-wide credential rotations (NVIDIA#2991)
• (dhcp) Include the host's IPv6 DNS resolvers in the agent's DHCP config (NVIDIA#2686)
• (dns) Cache all negative DNS responses, switch to LRU (NVIDIA#2133)
• (dns) Parse reverse-DNS (PTR) query names into IP addresses (NVIDIA#2691)
• (dns) Look up PTR records by interface address (NVIDIA#2711)
• (dns) Answer PTR queries in the DNS lookup handler (NVIDIA#2719)
• (dns) Serve PTR queries from carbide-dns (NVIDIA#2720)
• (dns) Derive reverse-DNS zones from network prefixes (NVIDIA#2769)
• (dns) Remove a reverse-DNS zone with its network segment (NVIDIA#2783)
• (dns) Serve forward A/AAAA for overlay instance addresses (NVIDIA#2786)
• (dns) Serve reverse PTR for overlay instance addresses (NVIDIA#2855)
• (docs) Added zero-dpu docs (NVIDIA#2163)
• (errors) Add operator error schema (NVIDIA#2586)
• (health) Add API support for NVL domain health records (NVIDIA#1854)
• (health) Add NVOS Streaming telemetry (NVIDIA#1975)
• (health) Suppress unchanged success-only reports within configurable interval (NVIDIA#2284)
• (health) Forward Redfish diagnostic payloads from health logs (NVIDIA#2831)
• (health) Enrich machine log metadata (NVIDIA#2882)
• (helm) Add opt-in legacy carbide/forge name aliases for nico-api… (NVIDIA#2249)
• (helm) Added fnn section in nico-core.yaml (NVIDIA#2612)
• (helm) Package Grafana dashboards (NVIDIA#2946)
• (libmlx) Add enumerated table-driven cases to raise coverage (NVIDIA#2516)
• (librms) v0.9.0-rc1 for hardware type-specific support (NVIDIA#2500)
• (logging) Add a component field to log metadata (NVIDIA#2354)
• (machine-a-tron) Register expected switches and power shelves (NVIDIA#2320)
• (machine-a-tron) Simulate a runtime DPU-to-NIC-mode flip (NVIDIA#2921)
• (machine-validation) M1: Add machine validation execution tracking foundation (NVIDIA#2651)
• (machine-validation) Implement M2 machine validation heartbeat recovery (NVIDIA#2838)
• (nico-ntp) Add chrony NTP helm subchart (NVIDIA#2167)
• (nvlink-manager) Report NMX-C GPU & ComputeNode NVLink health metrics (NVIDIA#2907)
• (observability) Propagate W3C trace context across nico-api's network boundaries (NVIDIA#2700)
• (pxe) Add enumerated coverage for additional pxe scenarios (NVIDIA#2578)
• (rest) Add site prerequisite bootstrap workflow (NVIDIA#2964)
• (rest-api) Write all expected-inventory device metadata to Core (NVIDIA#2310)
• (rest-api) Infer Provider/Tenant from caller's org (NVIDIA#2220)
• (rest-api) Hot-reload phone home URL config (NVIDIA#2289)
• (rest-api) Remove firmware_version from expected inventory APIs (NVIDIA#2544)
• (rest-api) Add DPU target for Tray firmware update API (NVIDIA#2467)
• (rest-api) Return valid JSON from DELETE endpoints (NVIDIA#2701)
• (rest-api) Auto-create Site IP Blocks from Site fabric prefixes (NVIDIA#2589)
• (rest-api) Enhance get all VPC Peering filtering and peer Tenant visibility (NVIDIA#2867)
• (rest-api) Support for adding Tenant information when reported Issue for Delete Instance (NVIDIA#2829)
• (rest-api) Add DPU machine retrieval endpoint (NVIDIA#2539)
• (rest-api) Allow users to specify UUID when creating Network Security Group (NVIDIA#2993)
• (rest-api) Expose isDpfEnabled for Expected Machine endpoints (NVIDIA#2961)
• (rest-api) Add host lifecycle profile attribute for Expected Machine (NVIDIA#2816)
• (rest-api) Add API model, endpoints for host firmware config management (NVIDIA#3002)
• (rest-api) Add Machine power control endpoint for Provider (NVIDIA#3022)
• (rpc) Gate prost builders behind test-support (NVIDIA#2195)
• (secrets) Configurable credential chain and writer (NVIDIA#2873)
• (site-explorer) Power cycle [not just Dell] to apply a queued NIC mode change (NVIDIA#2367)
• (site-explorer) Fall back to ACPowercycle when a vendor refuses PowerCycle (NVIDIA#2718)
• (site-explorer) Instrument the DPU NIC-mode migration flow (NVIDIA#2748)
• (site-explorer) Report Mellanox firmware from explored data (NVIDIA#2757)
• (site-explorer) Pair BF4 DPUs by chassis serial (NVIDIA#2906)
• (switch-controller) Add power control on/off/reset … (NVIDIA#2157)
• (v2.0) Add uploading nico-flow charts (NVIDIA#3875)
• (v2.0) Add Machine BMC reset, DPU reprovision & health report endpoints (NVIDIA#3184)
• (v2.0) Add per-claim-mapping audience validation for custom issuer (NVIDIA#3671)
• (zero-dpu) Allow flat VPC's to not belong to a network segment (NVIDIA#2666)
• (zero-dpu) Pass VPC ID to AllocateInstance from REST API (NVIDIA#2861)
• Add a bypass-state-controller flag to the component management API (NVIDIA#1803)
• Allow user to provide a custom imagepullsecret for the mandatoy services. (NVIDIA#2074)
• Add core component manager integration for compute tray in Flow (NVIDIA#2142)
• Add shared rule validation framework (NVIDIA#2162)
• Expose last seen scout version for a machine (NVIDIA#2037)
• Store the full boot interface for boot-device management (NVIDIA#2261)
• Log every gRPC call on server and client paths in Flow (NVIDIA#2276)
• And now enhance machine_interfaces with a full MachineBootInterface (NVIDIA#2285)
• Mandatory bmc reset in preingestion (NVIDIA#2197)
• Add ComponentStatus model in Flow — derive, persist, and surface per-component readiness (NVIDIA#2264)
• Store every NIC interface ID, not just DPU interface IDs (NVIDIA#2311)
• Surface Flow task report on Task API (NVIDIA#2288)
• Make any host interface the primary, not just a DPU (NVIDIA#2314)
• Add support to ingest delta powershelves (NVIDIA#2322)
• Pick how machines get their hostnames (IP, serial, mac, fun names, etc) (NVIDIA#2361)
• Initial changes for Astra support (NVIDIA#2216)
• Add Task Rule REST APIs for Flow Operation Rule Management (NVIDIA#2286)
• Dpf: Support for https proxy on DPU (NVIDIA#2459)
• Preserve MachineBootInterface information across machine/interface deletion (NVIDIA#2448)
• Add a separate site-wide credential for the SuperNIC Lockdown (NVIDIA#2481)
• Mirror Core expected inventory into Flow tables (NVIDIA#2440)
• Hardware-health fetch non sensor data metrics (NVIDIA#2433)
• More consistently resolve the machine boot interface (NVIDIA#2501)
• Include switch NVOS IP in Flow component/tray description (NVIDIA#2521)
• Set component leak_status from leak-detection loop in Flow (NVIDIA#2491)
• Add operation run foundation (NVIDIA#2479)
• Resolve the boot interface for machines awaiting their first lease (NVIDIA#2528)
• DPF: default dpf_enabled to true for expected machines (NVIDIA#2505)
• Health metrics contain machine id (NVIDIA#2168)
• Surface Flow component status, leak status, and override-readiness in REST (NVIDIA#2534)
• Support attaching HostInband segments to VPCs (NVIDIA#2470)
• Dpf: Display DPF disabled warning. (NVIDIA#2590)
• Add MCP read-only server mode (NVIDIA#2194)
• Set NTP servers from site config (NVIDIA#2610)
• Honor a declared primary host NIC when selecting the boot device (NVIDIA#2690)
• Update to Rust 1.96 (NVIDIA#2680)
• Resolve a host's boot interface from predictions before its first lease (NVIDIA#2712)
• Honor a declared primary NIC in the explored boot default (NVIDIA#2721)
• Add support for lenovo gb300s (NVIDIA#2753)
• Add generic Core gRPC proxy and BMC credential endpoints (NVIDIA#2477)
• Support storing secrets/credentials in Postgres (NVIDIA#2665)
• Boot a declared integrated NIC while keeping the DPUs managed (NVIDIA#2778)
• Declare a host NIC's network segment type directly (NVIDIA#2747)
• Add versioned paths for the various site-wide credentials in Vault to support rotation (NVIDIA#2785)
• Add operation run planning and create RPC (NVIDIA#2844)
• Bmc-mock telemetry service support (NVIDIA#2887)
• Track per-device credential rotation convergence (NVIDIA#2846)
• Resolve scout firmware upgrade scripts from static assets (NVIDIA#2756)
• Add Site Explorer run status to admin UI (NVIDIA#2591)
• Nvswitch telemetry gaps (NVIDIA#2945)
• Carbide side changes to support Astra (NVIDIA#2904)
• Scalable adhoc endpoint exploration (NVIDIA#2990)
• Adding VR hardware type to BMC explorer (NVIDIA#2910)
• Add an async variant + better integrated error checking (NVIDIA#2475)
• Add general CodeRabbit directives, specific instructions for REST API (NVIDIA#2128)
• Add CI jobs to detect proto/OpenAPI breaking changes (NVIDIA#2229)
• Add documentation for DPU Extension Service (NVIDIA#2269)
• Add make images target to build all container images (NVIDIA#2560)

Changed

• (bmc-mock) Avoid cloning machine info for BMC mock setup (NVIDIA#2779)
• (dns) Remove the unused instance-DNS view and its SQL hostname function (NVIDIA#2749)
• (machine-a-tron) Remove persisted DHCP IDs (NVIDIA#2780)
• (nico-admin-cli) Fetch paged list details concurrently (NVIDIA#2824)
• (rest-api) Use our generic cdb.GetPtr instead of per-type GetXPtr helpers (NVIDIA#2171)
• (rms-client) [breaking] Migrate to updated RMS proto (NVIDIA#1944)
• (rms-client) [breaking] Migrate to updated RMS proto (NVIDIA#2175)
• (site-explorer) Clarify the ACPowercycle-fallback log and scope its test (NVIDIA#2738)
• (site-explorer) Paginate the explored Mellanox device RPC (NVIDIA#2833)
• (site-explorer) Clarify BlueField part-number checks ...