Aleksei Sviridkin d575214b5e docs(sdn): document the membership-group SecurityGroup model ...

Rewrite the SecurityGroup design for the membership model: each group's own
identity label, attachments stored in a backing-policy annotation, the
REST/controller split, live fromSG/toSG references, the controller's hardening
invariants and the eventual-consistency window contract. Spell out that the
default-deny baseline flip and the membership admission webhook are out of
scope and why, and that membership relocates rather than fixes the "tenant
firewalls its own managed application" concern.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-25 17:50:33 +03:00

..

apis

docs(sdn): document the membership-group SecurityGroup model

2026-06-25 17:50:33 +03:00

apiserver

feat(sdn): wire SecurityGroup into the aggregated apiserver

2026-06-22 16:35:10 +03:00

cmd/server

feat(sdn): wire SecurityGroup into the aggregated apiserver

2026-06-22 16:35:10 +03:00

config

feat(api): add helm-upgrade-timeout annotation for asymmetric budgets

2026-06-22 09:48:26 +05:00

generated

refactor(sdn)!: reshape SecurityGroup into a membership-group model

2026-06-25 16:01:40 +03:00

lineage

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

ovnstatus

[kubeovn] Implement the KubeOVN plunger

2025-09-11 02:11:58 +03:00

registry

refactor(sdn)!: reshape SecurityGroup into a membership-group model

2026-06-25 16:01:40 +03:00

version

refactor(telemetry): split telemetry between operator and controller

2026-01-19 13:52:15 +01:00