Andrei KvapilandClaude 04cc1633be fix(kube-ovn): scope kubeovn-plunger cache and RBAC to its namespace ...

The kubeovn-plunger controller-runtime cache attempted cluster-wide
list/watch on Deployments and Pods, which the namespace-scoped Role
cannot satisfy. Additionally, the deployments rule relied on
resourceNames, which does not restrict list/watch verbs and left the
permission effectively unusable.

Scope the manager cache to the kube-ovn namespace so list/watch hit
the namespaced API, and drop resourceNames from the deployments rule.
Wire --kube-ovn-namespace and --ovn-central-name through the
Deployment so values are actually consumed.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>

2026-04-21 17:13:27 +02:00

..

backup-controller

[backups]

2026-02-04 15:50:23 +03:00

backupstrategy-controller

feat(backup): no manual actions required to perform restorejob for

2026-03-31 12:01:04 +04:00

cozypkg

feat(cozypkg): add cross-platform build targets with version injection

2026-01-15 17:18:01 +01:00

cozystack-api

[cozystack-api] Implement TenantNamespace, TenantModules, TenantSecret and TenantSecretsTable resources

2025-09-24 18:27:54 +02:00

cozystack-controller

refactor(controller): resolve Prometheus URL from namespace labels

2026-04-17 10:58:47 +03:00

cozystack-operator

fix(operator): skip PackageSource on empty URL, add comprehensive tests

2026-02-19 18:31:49 +03:00

flux-plunger

feat(platform): add flux-plunger controller

2026-01-19 13:20:08 +01:00

kubeovn-plunger

fix(kube-ovn): scope kubeovn-plunger cache and RBAC to its namespace

2026-04-21 17:13:27 +02:00

lineage-controller-webhook

[lineage] Separate webhook from cozy controller

2025-10-14 10:50:28 +03:00