IvanHunters 09b0688abd fix(marketplace): fail closed on an unparseable verified digest, and cover the generation gate ...

A verified cosign signature whose manifest digest could not be parsed fell back
to an unpinned tag pull, which reopens the tag-mutation window the verification
was meant to close. Return an error instead.

Add a test that isolates the status.observedGeneration == metadata.generation
conjunct of artifactReady; the existing tests exercised only the tag-prefix
conjunct, so a mutation of the generation check went uncaught.

Assisted-by: LLM
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>

2026-10-26 17:11:52 +03:00

..

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

fix(backups): prepare standalone VMDisk restore targets before the data mover runs

2026-10-13 18:05:45 +04:00

controller

fix(fluxcd): give each release its own share of the hook's retries

2026-10-13 15:09:00 +03:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

crdinstall

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

fluxcontract

test(fluxcontract): accept a timeout-bounded history read

2026-10-05 17:57:04 +03:00

fluxinstall

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

fluxshardoperator

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

lineagecontrollerwebhook

feat(scheduler): set scheduling-class label on mutated pods

2026-10-01 05:59:24 +03:00

manifestutil

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

marketplace

fix(marketplace): pin a tag-following tap source to the resolved digest

2026-10-22 22:02:49 +03:00

migrationcontroller

fix(migration): restore the class reclaim policy on imported volumes (#4480)

2026-09-29 14:41:04 +03:00

operator

fix(marketplace): fail closed on an unparseable verified digest, and cover the generation gate

2026-10-26 17:11:52 +03:00

securitygroupcontroller

refactor(api): keep each app's kind without the apimachinery fork

2026-09-26 16:08:24 +03:00

shared

fix(appdef): let one ApplicationDefinition own each application kind

2026-09-25 09:39:35 +03:00

sse

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

telemetry

fix(telemetry): use APIReader instead of cached client in operator

2026-01-27 18:06:30 +01:00

template

feat(backups): add RabbitMQ definitions backup via a dedicated strategy driver

2026-09-01 18:21:10 +04:00