Aleksei Sviridkin 9534a5a864 feat(cozystack-basics): let every authenticated user read GPUClass ...

The GPU catalog is what a tenant picks a class from, from a portal or
from kubectl and GitOps without one, so every authenticated user reads
it. GPUClass is cluster-scoped and tenant roles are bound per
namespace, so the read goes through its own ClusterRole bound to
system:authenticated. Nothing grants a write: classes are the
hoster's.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-11-03 05:25:02 +03:00

..

clusterroles-gpuclass_test.yaml

feat(cozystack-basics): let every authenticated user read GPUClass

2026-11-03 05:25:02 +03:00

clusterroles-options_test.yaml

feat(postgres): database read-replica autoscaling via KEDA (#3954)

2026-09-09 21:28:34 +03:00

clusterroles-tenant-admin-aggregation_test.yaml

fix(platform): freeze HTTPCache on the artifact the cluster runs

2026-09-18 13:12:56 +03:00

cozystack-values-secret_test.yaml

feat(gateway): align _namespace.gateway propagation with tenant.gatewayEffective

2026-05-25 17:07:02 +03:00

dashboard-role_test.yaml

fix(dashboard): read vm-disk images from the image option source

2026-09-29 12:40:37 +03:00

database-external-tls-policy_test.yaml

feat(redis)!: refuse external access without TLS at admission

2026-10-03 01:42:57 +03:00

gateway-hostname-policy_test.yaml

fix(cozystack-basics): normalize tenant hostname VAP comparisons with lowerAscii

2026-08-10 01:15:55 +03:00

hostname-policies-capability-gate_test.yaml

feat(redis)!: refuse external access without TLS at admission

2026-10-03 01:42:57 +03:00

ingress-hostname-policy_test.yaml

fix(cozystack-basics): normalize tenant hostname VAP comparisons with lowerAscii

2026-08-10 01:15:55 +03:00

monitoring-external-services_test.yaml

fix(monitoring): surface missing VictoriaLogs and gate dead-end vlinsert ExternalName (#3181)

2026-07-08 22:27:22 +03:00

root-vgpu_test.yaml

feat(cozystack-basics): take the root tenant vGPU flag from the platform

2026-11-03 05:24:08 +03:00

route-hostname-policy_test.yaml

fix(cozystack-basics): require route hostnames in tenant namespaces

2026-09-04 18:08:02 +03:00

tenant-root_test.yaml

feat(tenantgateway): switch Gateway allowedRoutes to label selector

2026-05-25 18:32:20 +03:00