cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 14:02:56 +09:00

Files

T

Ivan Okhotnikov 0bf26182da fix(apps/kubernetes,docs): explicit --oidc-extra-scope=email + doc alignment

Two follow-ups from the final adversarial review:

  - The chart-generated OIDC kubeconfig exec block requested only
    `--oidc-extra-scope=groups`. On a Keycloak realm where `email` is
    not a default client scope, kubectl-oidc-login would fetch a token
    that lacks the `email` claim — apiserver would then fail to
    identify the user, causing a silent auth failure. Add
    `--oidc-extra-scope=email` explicitly so the flow does not depend
    on realm-level default-scope hygiene.
  - `docs/oidc-tenant.md` still said the `User:` subject "must match
    the `preferred_username` claim emitted by the issuer" — obsolete
    after the claim switch. Rewrite to say `email`, and add a note
    that the chart requests the `email` scope explicitly.

Signed-off-by: Ivan Okhotnikov <ivan.okhotnikov@aenix.io>

2026-07-06 09:25:07 +03:00

bucket

fix(bucket): drop no-op label-based order/challenge delete

2026-06-29 23:10:24 +03:00

clickhouse

fix(clickhouse): reclaim cleanup hook RBAC on successful uninstall

2026-07-01 18:31:05 +03:00

foundationdb

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

harbor

fix(cozy-lib,harbor,mariadb): digest-pin cleanup-hook kubectl image and route it through cozy-lib.images-registry

2026-07-02 17:44:59 +03:00

http-cache

Prepare release v1.5.0

2026-06-22 10:55:37 +00:00

kafka

fix(kafka): set entity-operator resources to avoid OOM under tenant LimitRange

2026-06-23 13:44:29 +05:00

kubernetes

fix(apps/kubernetes,docs): explicit --oidc-extra-scope=email + doc alignment

2026-07-06 09:25:07 +03:00

mariadb

fix(mariadb): re-guard replication so single-replica passes the operator webhook (#3180 )

2026-07-02 22:54:14 +03:00

mongodb

chore(packages/apps/mongodb): bump CR version to 1.22.0

2026-06-22 18:55:38 +03:00

nats

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

openbao

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

opensearch

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

postgres

fix unittest assetions

2026-06-25 14:33:28 +03:00

qdrant

fix(qdrant): anchor PVC ordinal so cleanup never deletes a sibling's data

2026-06-30 14:17:14 +03:00

rabbitmq

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

redis

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

tcp-balancer

docs(apps): point seven app README preset tables at canonical docs

2026-05-12 03:08:52 +03:00

tenant

fix(tenant): emit full ancestor label chain on tenant namespaces

2026-07-03 09:51:49 +03:00

vm-disk

fix(hooks): run the refreshed alpine/k8s kubectl hooks non-root

2026-06-22 21:26:42 +03:00

vm-instance

fix(hooks): run the refreshed alpine/k8s kubectl hooks non-root

2026-06-22 21:26:42 +03:00

vpc

[docs] Update cozyvalues-gen

2026-03-25 15:59:22 +05:00

vpn

docs(apps): point seven app README preset tables at canonical docs

2026-05-12 03:08:52 +03:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

README.md

[clickhouse] add clickhouse keeper

2025-08-07 14:07:05 +03:00

README.md

How to test packages local

cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd