Commit Graph

  • 675163399d fix(platform): accept the container gpu-operator variant in iaas (#4101) Aleksei Sviridkin 2026-09-08 02:50:33 +04:00
  • b7e60855e9 test(tests): wire the gpu-operator suite into the unit sweep (#4110) Aleksei Sviridkin 2026-09-08 02:49:10 +04:00
  • 8a6ce8121d [Backport release-1.6] feat(etcd-operator): bump to v0.5.5 and vendor EtcdDefragPolicy CRDs (#4151) Andrei Kvapil 2026-09-08 00:28:06 +02:00
  • cf9c77d36d feat(etcd-operator): bump to v0.5.5 and vendor EtcdDefragPolicy CRDs Andrey Kolkov 2026-08-26 19:04:11 +04:00
  • a3ddba441f fix(opensearch-operator): set vm.max_map_count from a node DaemonSet Aleksei Sviridkin 2026-09-07 22:47:47 +03:00
  • 59731429a8 fix(vm-instance): let complete resources replace the instance type Aleksei Sviridkin 2026-09-07 00:09:30 +03:00
  • d949099f5e fix(ci): map the recurring app scopes to their area labels Aleksei Sviridkin 2026-09-07 05:01:33 +03:00
  • 3a4bade677 docs(postgres): document the kind-wide scope of the client-side apply flip Alexey Artamonov 2026-09-07 22:06:21 +03:00
  • e104c39f55 docs(rabbitmq): say that deleting the application leaves the TLS Secrets behind Aleksei Sviridkin 2026-09-07 21:59:35 +03:00
  • 678d22f209 docs(postgres): move the serverAddress namespace-pin note out of a template comment Alexey Artamonov 2026-09-07 21:03:15 +03:00
  • 1192922a88 docs(keda): document the teardown order for the ScaledObject finalizer Alexey Artamonov 2026-09-07 21:03:15 +03:00
  • 07f1daa22d docs(postgres): correct the replicas "restored on disable" claim Alexey Artamonov 2026-09-07 21:01:30 +03:00
  • 7e664d269b test(postgres-rd): pin the client-side apply annotation on the cozyrds AppDefinition Alexey Artamonov 2026-09-07 20:58:21 +03:00
  • 568ccf4835 fix(keda): gate the operator CiliumNetworkPolicy on the cilium.io/v2 API Alexey Artamonov 2026-09-07 20:56:18 +03:00
  • 3a09c3e9dc fix(postgres): guard dry-run/transition against the paused HPA min-clamp Alexey Artamonov 2026-09-07 20:48:11 +03:00
  • d3559d48ed feat(migration): tenant self-service VM import from VMware vSphere (#3931) Andrei Kvapil 2026-09-07 19:27:07 +02:00
  • 99d16a21bc fix(hack): stop the RD preset check failing at random feat/externalip-api Andrei Kvapil 2026-09-07 19:09:34 +02:00
  • d21feaed52 chore(api): regenerate deepcopy for the new ExternalIP value type Andrei Kvapil 2026-09-07 19:03:10 +02:00
  • 26562a4f6d test(cozy-lib): cover the externalIP claim helpers Andrei Kvapil 2026-09-07 18:42:02 +02:00
  • f550e73c78 docs(design-proposals): draft the Cozystack API v1 proposal feat/api-v1-design Andrei Kvapil 2026-09-07 18:41:37 +02:00
  • 8b2223d1b9 feat(vm-instance): let the external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:39:34 +02:00
  • a1f58a5c08 feat(clickhouse): add external access and let it wear a reserved address Andrei Kvapil 2026-09-07 18:38:26 +02:00
  • 2e093c7a65 feat(mariadb): let the external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:36:36 +02:00
  • ce00ac8652 feat(mongodb): let the sharded external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:35:48 +02:00
  • f31f819366 feat(rabbitmq): let the external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:34:43 +02:00
  • 958dde8a22 feat(kafka): let the external endpoints wear reserved addresses Andrei Kvapil 2026-09-07 18:33:52 +02:00
  • 773d6b9aee feat(redis): let the external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:32:46 +02:00
  • 7c2f73080f feat(postgres): let the external endpoint wear a reserved address Andrei Kvapil 2026-09-07 18:31:50 +02:00
  • 75b119a760 feat(cozy-lib): add helpers for pinning endpoints to reserved external IPs Andrei Kvapil 2026-09-07 18:26:40 +02:00
  • 6384c8f4d1 feat(ingress-nginx): restrict the admission webhook to the API server Andrei Kvapil 2026-09-07 16:52:00 +02:00
  • 54621bc046 feat(migration): tenant self-service VM import from VMware vSphere Andrei Kvapil 2026-09-07 16:51:52 +02:00
  • d000d02b99 feat(rabbitmq): add TLS support for AMQPS and management HTTPS (#2683) Aleksei Sviridkin 2026-09-07 18:51:34 +04:00
  • d685fb30ec fix(gateway)!: require tenant routes to declare their hostnames (#3475) Aleksei Sviridkin 2026-09-07 18:49:04 +04:00
  • 7d7eb1c23e chore(codeowners): rebuild ownership by area, five owners minimum (#4129) myasnikovdaniil 2026-09-07 19:47:11 +05:00
  • 94a202bc5a test(e2e): run the merge-gating lanes on Talos containers (#4020) myasnikovdaniil 2026-09-07 19:33:20 +05:00
  • 3748352eda feat(kubernetes): boot tenant worker disks from a shared golden Talos image (CDI clone) (#3294) test/drop-ghcr-mirror myasnikovdaniil 2026-09-07 17:47:50 +05:00
  • ac3e2d3397 docs(platform): document the upgrade preflight gate feat/upgrade-preflight-health-gate IvanHunters 2026-09-07 15:37:25 +03:00
  • 2795a8036f test(e2e): run the upgrade preflight gate against a live cluster IvanHunters 2026-09-07 15:35:30 +03:00
  • ccf6165645 fix(keda): scope autoscaler alerts per-cluster and fix ScaleBlocked false-fire Alexey Artamonov 2026-09-07 15:29:06 +03:00
  • 3516bbf314 docs(postgres): correct lag-brake floor and floor-raise shed comments Alexey Artamonov 2026-09-07 15:29:06 +03:00
  • 187f18a167 fix(postgres): harden autoscaler serverAddress guard and cap maxReplicas Alexey Artamonov 2026-09-07 15:29:06 +03:00
  • d5979db3fa test(platform): pin the LINSTOR RBAC render gate and the hook object count IvanHunters 2026-09-07 15:28:34 +03:00
  • 3b8fff88a5 fix(platform): exempt cordoned nodes from the readiness gate IvanHunters 2026-09-07 15:27:58 +03:00
  • 1084ae8c65 feat(platform): persist the preflight verdict beyond the hook Job IvanHunters 2026-09-07 15:26:13 +03:00
  • abace0b14a fix(platform): block the upgrade when the preflight runs no checks IvanHunters 2026-09-07 15:18:48 +03:00
  • 5364f6b681 fix(platform): coerce the preflight toggles from untyped Package CR values IvanHunters 2026-09-07 15:11:34 +03:00
  • 67a86746a6 feat(marketplace): community marketplace for External-Apps repositories (#3940) IvanHunters 2026-09-07 14:55:12 +03:00
  • 62f2234aea fix(e2e): stop a failed teardown posting a failed test verdict Myasnikov Daniil 2026-09-07 16:33:27 +05:00
  • 8456facc79 test(e2e): pin the stability-window reset and keep the fan-out test portable Myasnikov Daniil 2026-09-07 16:33:27 +05:00
  • b30c7efaf6 fix(e2e): make the OIDC teardown assertions fail closed Myasnikov Daniil 2026-09-07 16:31:08 +05:00
  • a115745c69 feat(vm-disk): let the operator defer binding to the consumer Myasnikov Daniil 2026-09-07 16:27:24 +05:00
  • 16a49740fe chore(codeowners): rebuild ownership by area, five owners minimum Myasnikov Daniil 2026-09-07 11:34:15 +05:00
  • 109ee1dd9e refactor(cozypkg): share one reserved-prefix list between init and validate IvanHunters 2026-09-01 21:48:11 +03:00
  • 8738063287 fix(operator): reject tar entries containing ".." before any path operation IvanHunters 2026-09-01 21:46:30 +03:00
  • 0c90abcedd test(rbac): cover the marketplace tap grants in the pinned RBAC suites IvanHunters 2026-09-01 21:44:46 +03:00
  • 7ac9404057 fix(operator): do not force-overwrite a PackageSource the platform does not own IvanHunters 2026-08-31 23:02:55 +03:00
  • b8f8efa66d feat(marketplace): restore the reserved-name check as a usability hint IvanHunters 2026-08-31 23:02:55 +03:00
  • 2af19c4378 fix(marketplace): Get surfaces a pending tap instead of 404 IvanHunters 2026-08-31 21:36:37 +03:00
  • d1e0f41cbd refactor(marketplace): drop community-prefix naming in the dashboard IvanHunters 2026-08-31 17:38:09 +03:00
  • 15be9329a1 refactor(marketplace): source-centric Tap resource, label-based identity IvanHunters 2026-08-31 17:36:27 +03:00
  • 1653da967b refactor(marketplace): drop artifact-prefix injection and reserved names IvanHunters 2026-08-31 17:28:30 +03:00
  • 95badea1c8 refactor(marketplace): identify taps by marker label, drop community rename IvanHunters 2026-08-31 17:22:17 +03:00
  • 0c0609ad63 fix(marketplace): resolve community chartRef via injected artifact prefix IvanHunters 2026-08-28 09:21:04 +03:00
  • 950268cccc feat(marketplace): reject reserved PackageSource name prefixes IvanHunters 2026-08-28 09:15:00 +03:00
  • b96a97e5c4 fix(marketplace): resolve tap artifact host to ClusterIP for the hostNetwork operator IvanHunters 2026-08-26 21:26:42 +03:00
  • b6f14373b5 fix(marketplace): scope controller OCIRepository writes and split validate YAML safely IvanHunters 2026-08-26 19:53:32 +03:00
  • c9accd6086 fix(marketplace): address maintainer review — url collisions, fail-closed digest, centralized prefix IvanHunters 2026-08-26 19:39:52 +03:00
  • 3ce8279019 fix(marketplace): prune stale taps, preserve source state, scope RBAC, pull by digest IvanHunters 2026-08-26 19:31:07 +03:00
  • d5891f7093 fix(marketplace): close gate rename bypass, label CLI tap sources, reject artifact-name collisions IvanHunters 2026-08-26 19:25:28 +03:00
  • 7b703f2859 fix(cozypkg): satisfy golangci-lint and derive a valid kind for hyphenated apps IvanHunters 2026-08-26 19:20:52 +03:00
  • f88d5c13c2 feat(cozypkg): confirm privileged components on add unless --allow-privileged IvanHunters 2026-08-26 17:32:53 +03:00
  • 35e54fb49e feat(dashboard): search and trust notice on the Repositories view IvanHunters 2026-08-26 17:32:53 +03:00
  • 559c050de0 fix(cozypkg): pin tap short-name to the index version and harden the gate IvanHunters 2026-08-26 17:30:10 +03:00
  • 3643fceceb refactor(marketplace): fail-safe re-tap rollback and single-source artifact naming IvanHunters 2026-08-21 15:10:01 +03:00
  • 1fbceee10e fix(marketplace): operator RBAC for tap materialization and dot-safe artifact naming IvanHunters 2026-08-21 15:00:54 +03:00
  • be03900262 refactor(marketplace): address review — shared naming, tap rollback, pinned gate, trust docs IvanHunters 2026-08-21 11:49:22 +03:00
  • 52de2e460e fix(cozystack-api): grant Tap write-path RBAC and recover pending taps IvanHunters 2026-08-21 11:46:23 +03:00
  • 2cedd76fb9 feat(dashboard): add marketplace Repositories view backed by the Tap resource IvanHunters 2026-08-21 11:10:06 +03:00
  • 11e2f07fae feat(packages-index): add community index gate template with two-lane merge IvanHunters 2026-08-21 11:00:38 +03:00
  • 66736fc2a0 feat(cozypkg): implement keyless cosign verification for validate IvanHunters 2026-08-21 10:56:03 +03:00
  • e61d2c7b53 feat(marketplace): connect a community tap from the API with async materialization IvanHunters 2026-08-21 10:49:16 +03:00
  • c8fd40c419 feat(cozystack-api): support disconnecting a community tap via the Tap resource IvanHunters 2026-08-21 10:32:57 +03:00
  • 5848d85840 feat(cozystack-api): add read-only Tap resource for the marketplace view IvanHunters 2026-08-21 00:42:23 +03:00
  • 8035e5ae70 feat(cozypkg): add search command and community index resolution IvanHunters 2026-08-21 00:14:22 +03:00
  • 24cfa2d657 feat(cozypkg): add tap and untap commands with private-source support IvanHunters 2026-08-21 00:08:39 +03:00
  • c9e8bc9524 feat(cozypkg): add init and push commands for External-Apps repositories IvanHunters 2026-08-21 00:02:15 +03:00
  • e3977d17c2 feat(cozypkg): add offline validate command for External-Apps repositories IvanHunters 2026-08-20 23:42:43 +03:00
  • d06354993e docs(postgres): correct the WorkloadMonitor replicas rationale Alexey Artamonov 2026-09-07 10:20:31 +03:00
  • 2bf37f8260 fix(postgres): anchor autoscaler SSRF guard to the cluster domain Alexey Artamonov 2026-09-07 10:20:24 +03:00
  • cc70cef7b9 docs(linstor): record the measured topology requirement Myasnikov Daniil 2026-09-07 10:16:22 +05:00
  • 6e8566a94c fix(platform): accept the container gpu-operator variant in iaas Aleksei Sviridkin 2026-09-07 01:38:40 +03:00
  • 6f74a1c804 test(tests): wire the gpu-operator suite into the unit sweep Aleksei Sviridkin 2026-09-07 01:52:40 +03:00
  • 3c5d9f49e5 docs(rabbitmq): scope the runbook check and close the narrower-variant question Aleksei Sviridkin 2026-09-07 03:13:15 +03:00
  • dac599b271 test(rabbitmq): check the values a pipeline cannot report a status for Aleksei Sviridkin 2026-09-07 02:55:04 +03:00
  • 2f6c1554ed docs(rabbitmq): correct two TLS mechanisms the prose states wrongly Aleksei Sviridkin 2026-09-07 02:54:55 +03:00
  • d45663f1af ci(agents): check commit trailers on every pull request Aleksei Sviridkin 2026-09-07 00:57:46 +03:00
  • ee3ce33bd6 test(rabbitmq): hold the topology kind list against the operator CRDs Aleksei Sviridkin 2026-09-07 02:27:50 +03:00
  • 69155919b4 fix(rabbitmq): refuse on every topology kind that wedges Aleksei Sviridkin 2026-09-07 02:27:41 +03:00
  • eef5fe6908 fix(platform): declare the injected _cluster values in system charts Aleksei Sviridkin 2026-09-07 01:44:04 +03:00
  • cd675e113f fix(postgres): point the trust-anchor comment at the published projection (#4063) Aleksei Sviridkin 2026-09-07 03:15:28 +04:00