fix(nvca-operator): bump NVCA images to 3.12.7

[mikeyrcamp]

TL;DR

Update the NVCA operator chart to the published NVCA 3.12.7 release so the runtime fix from #2004 is included in chart-based installations.

The chart intentionally leaves image.tag empty and falls back to appVersion, so the automated image-tag bump could not locate an inline tag. This performs the supported chart re-vendor with the published version while preserving the existing shared-storage and OpenTelemetry image pins.

Follow-up to #2004. Refs #2002.

Changes

• Set the operator chart appVersion to 3.12.7.
• Set the default self-managed NVCA version to 3.12.7.
• Preserve all unrelated vendored chart content and image pins.

Release inputs:

• NVCA 3.12.7
• NVCA operator chart 1.28.6

Validation

• make check-vendor-chart (post-commit reproducibility check)
• make lint validate with Helm 3.21.4 and kubeconform: 22 resources checked, 21 valid, 0 invalid, 1 skipped
• NVCA operator chart regression suites:
  • vendored image-tag behavior
  • self-managed NVCA image resolution
  • image-pull-secret defaults
  • pod disruption budgets
  • first-class BYOO and storage-worker values
  • default ownership
  • Kubernetes resource-quantity schema validation
• Repository Helm validation: all 19 charts passed
• Disposable local k3d upgrade:
  • built the operator from the merged 3.12.7 source and upgraded the release with this chart
  • operator rollout completed with both containers ready on nvca-operator:3.12.7
  • zero container restarts after rollout
  • self-managed backend reconciled to version 3.12.7
  • malformed CPU quantities were rejected by chart schema validation before workload creation

Summary by CodeRabbit

• Updates
  • Updated the default NVCA backend version to 3.12.7.
  • Updated the Helm chart application version to 3.12.7.

[coderabbitai]

Understand this PR’s impact

Explore downstream dependencies and potential security impact with Blast Radius.

View blast radius →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: NVIDIA/nvcf/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: c9e8dbf0-cf8f-4db6-81fe-8254a1b879af

📥 Commits

Reviewing files that changed from the base of the PR and between 62813aa and 7dac70c.

📒 Files selected for processing (2)

• deploy/helm/nvca-operator/nvca-operator/Chart.yaml
• deploy/helm/nvca-operator/nvca-operator/values.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The Helm chart application version and the default self-managed NVCA backend version changed from 3.10.0 to 3.12.7.

Changes

NVCA version alignment

Layer / File(s)	Summary
Align chart and backend versions deploy/helm/nvca-operator/nvca-operator/Chart.yaml, deploy/helm/nvca-operator/nvca-operator/values.yaml	The chart appVersion and selfManaged.nvcaVersion now use 3.12.7.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Bug fix

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title uses valid Conventional Commits syntax with the required scope. It accurately describes the NVCA image version update and reflects the runtime fix included in the release.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}