fix(weave): share release-derived trace service account

charts/lumen/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
-digest: sha256:60d1023fe307cba27e2dfe573be514601dc0dcacb6d72f91323615fedaa42772
-generated: "2026-07-29T18:00:40.632395-05:00"
+  version: 0.12.7
+digest: sha256:6a4d35030d930a8ad4f6a1ada246116749584e084a7a6f2b2f2f48de13e0c990
+generated: "2026-08-11T14:59:58.54023-07:00"

charts/lumen/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: lumen
 description: A Helm chart for deploying the W&B Lumen processor and notebook
 type: application
-version: 0.2.5
+version: 0.2.6
 appVersion: 1.0.0
 
 maintainers:
@@ -13,9 +13,9 @@ maintainers:
 dependencies:
   - name: wandb-base
     alias: processor
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
   - name: wandb-base
     alias: notebook
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base

charts/operator-wandb/Chart.lock

@@ -1,43 +1,43 @@
 dependencies:
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: mysql
   repository: file://charts/mysql
   version: 0.1.0
@@ -61,19 +61,19 @@ dependencies:
   version: 0.1.0
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: stackdriver
   repository: file://charts/stackdriver
   version: 0.1.0
@@ -82,39 +82,39 @@ dependencies:
   version: 0.1.0
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: wandb-base
   repository: file://../wandb-base
-  version: 0.12.6
+  version: 0.12.7
 - name: reloader
   repository: https://stakater.github.io/stakater-charts
   version: 1.3.0
 - name: clickhouse
   repository: file://charts/clickhouse
   version: 9.1.1
-digest: sha256:039ae3137a49174b04980ea7cafdd5f83fc517a898b577278b76a587b1723266
-generated: "2026-08-05T08:44:45.513577-05:00"
+digest: sha256:1986ad265b0aaca94ee3286ce5b4f08e3841c9813bf22a16cc7ec97925d61a52
+generated: "2026-08-11T14:59:55.991901-07:00"

charts/operator-wandb/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: operator-wandb
 description: A Helm chart for deploying W&B to Kubernetes
 type: application
-version: 0.44.5
+version: 0.44.6
 appVersion: 1.0.0
 icon: https://wandb.ai/logo.svg
 
@@ -14,67 +14,67 @@ maintainers:
 dependencies:
   - name: wandb-base
     alias: app
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: app.install
   - name: wandb-base
     alias: appRenamePreHook
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: appRenamePreHook.install
   - name: wandb-base
     alias: appRenamePostHook
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: appRenamePostHook.install
   - name: wandb-base
     alias: api
     condition: global.api.enabled
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: console
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: console.install
   - name: wandb-base
     alias: weave
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: weave.install
   - name: wandb-base
     alias: weave-trace
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: weave-trace.install
   - name: wandb-base
     alias: weave-trace-worker
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: weave-trace-worker.install
   - name: wandb-base
     alias: weave-evaluate-model-worker
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: weave-evaluate-model-worker.install
   - name: wandb-base
     alias: weave-trace-agent-scoring-worker
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: weave-trace-agent-scoring-worker.install
   - name: wandb-base
     alias: executor
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: executor.install
   - name: wandb-base
     alias: parquet
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: parquet.install
   - name: wandb-base
     alias: parquet-metadata-cache
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: parquet-metadata-cache.install
   - name: mysql
@@ -109,20 +109,20 @@ dependencies:
     alias: flat-run-fields-updater
     condition: flat-run-fields-updater.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: history-updater
     condition: history-updater.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: run-store-accelerator-run-updater
     condition: run-store-accelerator-run-updater.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: filestream
-    version: "0.12.6"
+    version: "0.12.7"
     repository: file://../wandb-base
     condition: filestream.install
   - name: wandb-base
@@ -142,52 +142,52 @@ dependencies:
     alias: frontend
     condition: frontend.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: filemeta
     condition: filemeta.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: anaconda2
     condition: anaconda2.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: internalSignerPreHook
     condition: global.localService.bypass
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: metric-observer
     condition: metric-observer.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: glue
     condition: global.glue.enabled
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: settingsMigrationJob
     condition: settingsMigrationJob.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: clickhouseMigrationJob
     condition: clickhouseMigrationJob.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: mcp-server
     condition: mcp-server.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: wandb-base
     alias: lumen-agent
     condition: lumen-agent.install
     repository: file://../wandb-base
-    version: "0.12.6"
+    version: "0.12.7"
   - name: reloader
     condition: reloader.install
     version: 1.3.0

charts/operator-wandb/templates/_bucket.tpl

@@ -124,6 +124,15 @@ cannot be represented without changing Weave's object layout.
 {{- and (index $fileStorage "useDefaultBucket" | default false) $identityConfigured -}}
 {{- end }}
 
+{{/*
+Name of the shared Weave Trace ServiceAccount, owned at the umbrella level by
+templates/weave-trace-serviceaccount.yaml. Must stay identical to
+"wandb-base.weaveTraceServiceAccountName" in charts/wandb-base/templates/_helpers.tpl.
+*/}}
+{{- define "wandb.weaveTraceServiceAccountName" -}}
+  {{- printf "%s-weave-trace" .Release.Name -}}
+{{- end }}
+
 
 {{- define "wandb.bucket" -}}
   {{- $url := "" -}}

charts/operator-wandb/templates/weave-trace-serviceaccount.yaml

@@ -0,0 +1,14 @@
+{{- if index .Values "weave-trace" "install" }}
+{{- $weaveTrace := index .Values "weave-trace" | default dict -}}
+{{- $serviceAccount := $weaveTrace.serviceAccount | default dict -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "wandb.weaveTraceServiceAccountName" . }}
+  labels:
+    {{- include "wandb.commonLabels" . | nindent 4 }}
+  {{- with $serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}

charts/operator-wandb/tests/azure_storage_auth_test.yaml

@@ -462,7 +462,7 @@ tests:
       - hasDocuments:
           count: 0
 
-  - it: keeps Weave on its component account when its default bucket gate is disabled
+  - it: uses the trace ServiceAccount when its default bucket gate is disabled
     template: charts/weave-trace/templates/deployment.yaml
     set:
       weave-trace: