From e754ef8823ff25651bdef53d53585c3d7435ccad Mon Sep 17 00:00:00 2001
From: Codex <codex@openai.com>
Date: Mon, 26 Oct 2026 14:32:05 +0100
Subject: [PATCH] fix: update Milvus to 2.5.27

---
 deploy/milvus-slim/milvus.yaml   | 4 ++--
 deploy/milvus/milvus.yaml        | 4 ++--
 tests/test_datastore_security.py | 8 ++++++++
 3 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/deploy/milvus-slim/milvus.yaml b/deploy/milvus-slim/milvus.yaml
index 34adb68..2000227 100644
--- a/deploy/milvus-slim/milvus.yaml
+++ b/deploy/milvus-slim/milvus.yaml
@@ -50,7 +50,7 @@ spec:
       initContainers:
       containers:
       - name: standalone
-        image: "milvusdb/milvus:v2.5.2"
+        image: "milvusdb/milvus:v2.5.27"
         imagePullPolicy: IfNotPresent
         args: [ "milvus", "run", "standalone"]
         ports:
@@ -108,4 +108,4 @@ spec:
         persistentVolumeClaim:
           claimName: openserverless-milvus
       - name: disk
-        emptyDir: {}
\ No newline at end of file
+        emptyDir: {}
diff --git a/deploy/milvus/milvus.yaml b/deploy/milvus/milvus.yaml
index 34adb68..2000227 100644
--- a/deploy/milvus/milvus.yaml
+++ b/deploy/milvus/milvus.yaml
@@ -50,7 +50,7 @@ spec:
       initContainers:
       containers:
       - name: standalone
-        image: "milvusdb/milvus:v2.5.2"
+        image: "milvusdb/milvus:v2.5.27"
         imagePullPolicy: IfNotPresent
         args: [ "milvus", "run", "standalone"]
         ports:
@@ -108,4 +108,4 @@ spec:
         persistentVolumeClaim:
           claimName: openserverless-milvus
       - name: disk
-        emptyDir: {}
\ No newline at end of file
+        emptyDir: {}
diff --git a/tests/test_datastore_security.py b/tests/test_datastore_security.py
index 5b0701d..ea7a793 100644
--- a/tests/test_datastore_security.py
+++ b/tests/test_datastore_security.py
@@ -97,6 +97,14 @@ def test_monitoring_does_not_allow_all_peers(self):
         self.assertTrue(all(peer['podSelector']['matchLabels'] for peer in metrics[0]['from']))
         self.assertFalse(any('namespaceSelector' in peer for peer in metrics[0]['from']))
 
+    def test_milvus_image_includes_metrics_port_authentication_fix(self):
+        import yaml
+        root = Path(__file__).resolve().parents[1]
+        for profile in ['milvus', 'milvus-slim']:
+            manifest = yaml.safe_load((root/'deploy'/profile/'milvus.yaml').read_text())
+            container = manifest['spec']['template']['spec']['containers'][0]
+            self.assertEqual(container['image'], 'milvusdb/milvus:v2.5.27')
+
     def test_etcd_peer_port_is_restricted_to_members(self):
         rules = security.policy('etcd')['spec']['ingress']
         peer_rule = [rule for rule in rules if any(p['port'] == 2380 for p in rule['ports'])]