> This page is for version 1.0.4 (default).
> For other versions, use one of these documentation indexes:
> - 1.0.4 (default): https://docs.nvidia.com/nvcf/1.0.4/llms.txt
> - 1.1.0: https://docs.nvidia.com/nvcf/1.1.0/llms.txt
> - 1.0.3: https://docs.nvidia.com/nvcf/1.0.3/llms.txt
> - 1.0.2: https://docs.nvidia.com/nvcf/1.0.2/llms.txt
> - 1.0.1: https://docs.nvidia.com/nvcf/1.0.1/llms.txt
> - Development: https://docs.nvidia.com/nvcf/dev/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/nvcf/llms.txt.

# NVCF 1.0.4

## NVCF 1.0.4

NVCF 1.0.4 selects Self-Managed 1.0.10, Compute Plane 1.0.5 and Observability
1.0.0. It combines security patches and runtime fixes across the three stacks.
The [selected stack versions](/nvcf/release-notes/compatibility-matrix#selected-stack-releases)
and [artifact manifest](/nvcf/manifest/artifacts) record the complete
selection. Changes below are relative to docs edition 1.0.2.

* Updates selected service, worker and telemetry dependencies for security
  maintenance, including NICLLS 2.118.2, Samba 1.0.9 and both compute-plane
  collectors at 0.160.0-nv-0.2.9.
* Patches the Java service runtime images and updates OpenBao server and agent
  to 2.6.3 with both old and target JWT plugins installed. Existing mounts retain
  their selection; new mounts use target `v1.4.1`. Existing-mount migration is a
  separate procedure. The migration image includes patched Kubernetes clients.
* Corrects Samba share ownership setup so non-root Helm tasks can create
  their results directory. Samba retains its existing root runtime.
* Returns a prompt not-found response when an LLM function is sent to the
  unsupported classic invocation endpoint.
* Preserves existing readable secret-file ownership during non-root ESS refresh.
* Processes new NVCA requests after a restarted stream reuses a sequence
  number, and fixes NATS authentication reconnect and account selection.
* Replaces legacy task-worker references with published init and task images.
  Follow the [task image prerequisites](/nvcf/self-managed/upgrade-recovery#task-worker-images)
  when upgrading a deployment that runs tasks.
* Includes ICMS reconnect and instance-event fixes and an opt-in legacy
  lookup backfill. Pylon allows queued LLM requests more time for first output.
* Adds upstream image override support for NATS, cert-manager and the Vault
  injector. NATS uses the upstream Synadia server by default.

Use [Consume an NVCF release](/nvcf/overview/umbrella-releases)
to download the selected packages.
Read the [upgrade procedure](/nvcf/release-notes/1-0-2-to-1-0-4-upgrade)
for the hostname-policy prerequisite, NVCA-first ordering, queue draining,
OpenBao bridge and member rotation gates, storage checks and rollback limits.

Cassandra stays on Apache 5.0.9 with an updated image, trust store and migration
security dependencies.
State-metrics changes and a Samba non-root redesign are outside this release.