jarvis9443 · Nov 12, 2026 · Nov 9, 2026 · Nov 12, 2026
diff --git a/charts/aisix-cp/Chart.yaml b/charts/aisix-cp/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: aisix-cp
 description: Helm chart for AISIX control plane (cp-api, dp-manager, dashboard)
 type: application
-version: 1.9.0
-appVersion: "1.9.0"
+version: 1.10.0
+appVersion: "1.10.0"
 
 maintainers:
   - name: API7

diff --git a/charts/aisix-cp/README.md b/charts/aisix-cp/README.md
@@ -1,6 +1,6 @@
 # aisix-cp
 
-![Version: 1.9.0](https://img.shields.io/badge/Version-1.9.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.9.0](https://img.shields.io/badge/AppVersion-1.9.0-informational?style=flat-square)
+![Version: 1.10.0](https://img.shields.io/badge/Version-1.10.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.10.0](https://img.shields.io/badge/AppVersion-1.10.0-informational?style=flat-square)
 
 Helm chart for AISIX control plane (cp-api, dp-manager, dashboard)
 
@@ -102,7 +102,7 @@ helm repo add api7 https://charts.api7.ai
 helm repo update
 
 helm install aisix-cp api7/aisix-cp --namespace aisix --create-namespace \
-  --version 1.9.0 \
+  --version 1.10.0 \
   -f cp-values.yaml
 ```
 
@@ -111,7 +111,7 @@ same install, as long as you record what you generated:
 
 ```sh
 helm install aisix-cp api7/aisix-cp --namespace aisix --create-namespace \
-  --version 1.9.0 \
+  --version 1.10.0 \
   --set secrets.masterKey="$(openssl rand -base64 32)" \
   --set postgresql.auth.postgresPassword="$(openssl rand -hex 24)" \
   --set postgresql.auth.password="$(openssl rand -hex 24)"
@@ -181,7 +181,7 @@ fails the handshake with nothing logged to say why.
 
 The console's generated commands carry a gateway image, taken from
 `api.dpImage`. Left empty — the default — `cp-api` hands out the gateway of its
-own release, so this release hands out `docker.io/api7/aisix:1.9.0`.
+own release, so this release hands out `docker.io/api7/aisix:1.10.0`.
 Set it only to pin a different image, and remember that a value set explicitly
 carries forward across upgrades, so gateways added later come up on the old
 image.
@@ -359,7 +359,7 @@ install time:
 
 ```sh
 helm install aisix-cp api7/aisix-cp --namespace aisix --create-namespace \
-  --version 1.9.0 \
+  --version 1.10.0 \
   -f cp-values.yaml \
   --set postgresql.primary.podSecurityContext.enabled=false \
   --set postgresql.primary.containerSecurityContext.enabled=false

diff --git a/charts/aisix-cp/templates/NOTES.txt b/charts/aisix-cp/templates/NOTES.txt
@@ -74,15 +74,22 @@ Connect a data-plane (managed mode):
 
   Then run the DP container (replace <node-ip> and <node-port>):
 
-    docker run --rm \
+    docker run -d --name aisix-dp --restart unless-stopped --stop-timeout 45 \
       -e AISIX_CONFIG_PATH=/etc/aisix/config.managed.yaml \
       -e AISIX_MANAGED__CP_BASE_URL=https://<node-ip>:<node-port> \
       -e AISIX_MANAGED__CP_ETCD_ENDPOINT=<node-ip>:<node-port> \
       -e AISIX_MANAGED__CP_CERT_PEM='<client-cert-pem>' \
       -e AISIX_MANAGED__CP_KEY_PEM='<client-key-pem>' \
       -e AISIX_MANAGED__CP_CA_PEM='<ca-cert-pem>' \
       -v aisix-mtls:/var/lib/aisix \
+      -p 3000:3000 \
       {{ .Values.api.dpImage | default (printf "docker.io/api7/aisix:%s" .Chart.AppVersion) }}
+
+  Check that it connected; this returns once it has loaded its configuration:
+
+    until curl -fs --noproxy 127.0.0.1 http://127.0.0.1:3000/readyz; do sleep 1; done; echo
+
+  If it keeps waiting, docker logs aisix-dp says why.
 {{- else }}
   DPM is a ClusterIP service. Expose it via Ingress, LoadBalancer, or port-forward:
     kubectl port-forward svc/{{ include "aisix-cp.fullname" . }}-dpm {{ .Values.dpm.service.port }}:{{ .Values.dpm.service.port }} -n {{ .Release.Namespace }}

diff --git a/charts/aisix/Chart.yaml b/charts/aisix/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: aisix
 description: Helm chart for the AISIX AI gateway data plane
 type: application
-version: 1.9.0
-appVersion: "1.9.0"
+version: 1.10.0
+appVersion: "1.10.0"
 
 keywords:
   - ai-gateway

diff --git a/charts/aisix/README.md b/charts/aisix/README.md
@@ -1,6 +1,6 @@
 # aisix
 
-![Version: 1.9.0](https://img.shields.io/badge/Version-1.9.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.9.0](https://img.shields.io/badge/AppVersion-1.9.0-informational?style=flat-square)
+![Version: 1.10.0](https://img.shields.io/badge/Version-1.10.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.10.0](https://img.shields.io/badge/AppVersion-1.10.0-informational?style=flat-square)
 
 Helm chart for the AISIX AI gateway data plane
 
@@ -551,14 +551,14 @@ rejects. New installs set the value in its own key in `values.yaml` or under
 | config.managed.mtls_dir | string | `"/var/lib/aisix/mtls"` | Directory the materialised mTLS bundle is written to |
 | config.managed.snapshot_cache_enabled | bool | `false` | Persist a configuration snapshot for recovery while etcd is unreachable. The snapshot holds unencrypted credentials |
 | config.managed.snapshot_cache_path | string | `nil` | Snapshot location. Null uses `/var/lib/aisix/config_cache.json` |
-| config.observability.access_log | bool | `true` | Write an access-log line per request |
+| config.observability.access_log | bool | `true` | Write an access-log line per request, whatever the log level |
 | config.observability.debug.addr | string | `"127.0.0.1:9091"` | Diagnostics listener address. Loopback keeps it off the network |
 | config.observability.debug.enabled | bool | `true` | Serve the unauthenticated heap-profile endpoint (`/debug/pprof/heap`) |
 | config.observability.heap_profiling.auto_dump.dir | string | `"/var/lib/aisix/heap"` | Directory the profiles are written to |
 | config.observability.heap_profiling.auto_dump.enabled | bool | `true` | Write a heap profile as resident memory nears the memory limit |
 | config.observability.heap_profiling.auto_dump.keep | int | `5` | Newest profiles kept |
 | config.observability.heap_profiling.auto_dump.thresholds | list | `[0.8,0.9]` | Fractions of the memory limit that each trigger one profile |
-| config.observability.log_level | string | `"info"` | Log level: trace, debug, info, warn or error |
+| config.observability.log_level | string | `"warn"` | Log level: trace, debug, info, warn or error. Set `info` while diagnosing |
 | config.observability.metrics.buckets | object | `{"a2a_ttfb":null,"guardrail_latency":null,"request_e2e_latency":null,"request_ttft":null}` | Per-metric histogram bucket edges in seconds. Null keeps that metric's default buckets |
 | config.observability.metrics.client_type_rules | list | `[]` | User-Agent to `client_type` mapping rules, first match wins, e.g. `[{pattern: "^py-billing-batcher/", client: billing-batcher}]` |
 | config.observability.metrics.labels | object | `{}` | Complete optional label list per metric, e.g. `{aisix_request_ttft_seconds: [model, provider]}`. Omitted metrics keep their default labels |

diff --git a/charts/aisix/values.yaml b/charts/aisix/values.yaml
@@ -266,9 +266,9 @@ config:
   observability:
     # -- Service name reported in telemetry
     service_name: aisix
-    # -- Log level: trace, debug, info, warn or error
-    log_level: info
-    # -- Write an access-log line per request
+    # -- Log level: trace, debug, info, warn or error. Set `info` while diagnosing
+    log_level: warn
+    # -- Write an access-log line per request, whatever the log level
     access_log: true
     metrics:
       # -- Complete optional label list per metric, e.g.