Changelog
bifrost.schemaUrl— override the generatedconfig.json$schemalocation for isolated or air-gapped deployments. Accepts an HTTP(S) URL,file://URL, or filesystem path. When set, the value is also exported asBIFROST_SCHEMA_URLin the pod; when empty (default), the env var is not injected and the public schema URL is used. Renders into$schema.bifrost.auditLogs.objectStoragefor archiving audit events to S3/GCS. Each flushed batch is written as a JSONL object ({prefix}/audit-logs/YYYY/MM/DD/HH/{id}.jsonl); setcompress: trueto gzip the output (.jsonl.gz). Supportstype(s3/gcs),bucket,prefix,compress, and full S3 credential fields (region,endpoint,accessKeyId,secretAccessKey,sessionToken,roleArn,forcePathStyle) and GCS fields (projectId,credentialsJson). Renders intoaudit_logs.object_storage.force_single_regiononbifrost.providers.vertex.keys[*].vertex_key_config— whentrue, skips automatic promotion of multi-region-only models to a multi-region endpoint. Enable for provisioned throughput. Renders intovertex_key_config.force_single_region.calendar_alignedonbifrost.accessProfiles[*](top-level) — snaps all budget and rate-limit reset windows to calendar boundaries for the profile. Passes through intoaccess_profiles[*].calendar_aligned.calendar_alignedonbifrost.accessProfiles[*].budgets[*]andbifrost.accessProfiles[*].provider_configs[*].budgets[*]— schema previously blocked this field; now matches parity withgovernance.budgets[*].calendar_aligned.calendar_alignedonbifrost.governance.virtualKeys[*]— was accepted by schema but not rendered into config. Now correctly emitsvirtual_keys[*].calendar_alignedin the generated config.bifrost.alertingfor declarative alert channels and rules. Supportshistory_retention_days,webhook_network(allow_http,allow_private_network),channels[](slack, microsoft_teams, pagerduty, webhook), andrules[](CEL-expression-based, governance-scope-aware). Renders intoalerting.postgresql.external.portnow accepts a string in addition to an integer, enabling env-variable substitution viaenv.VAR_NAMEreferences when mounting port from a Kubernetes secret. Renders intopostgres_config.port.bifrost.mcp.toolGroups[*].id— optional integer DB ID for an existing MCP tool group. When set, the reconciler updates the group by ID instead of matching by name. Renders intomcp.tool_groups[*].id.

