admin/cozystack
1
0 Fork 0
mirror of https://github.com/cozystack/cozystack.git synced 2026-11-08 21:14:56 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
2afcaf365a05408600a4df9b8517c78120f7b76f
cozystack/packages/system
T
History
Kirill Ilin 2afcaf365a feat(keycloak): let the KMS proxy trust a private Vault CA 
The proxy could only reach a Vault whose certificate chains to a publicly
trusted root, so a Vault fronted by an internal load balancer with a
self-signed certificate was unreachable over HTTPS.

Allow the CA to be supplied inline (caBundle, the chart renders the Secret) or
as a pre-seeded Secret (caSecretName), mounted and exposed as SSL_CERT_FILE.
That redirects only the system trust store, which nothing but the Vault client
consults — the database leg verifies against its own CA pool.

Assisted-By: Claude AI
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 3531553176)
2026-08-28 07:29:22 +00:00
..
application-definition-crd
docs(api): note disableWait silently defeats healthCheckExprs
2026-07-16 16:48:33 +05:00
backup-controller
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
backupstrategy-controller
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
bootbox
…
bootbox-rd
…
bucket
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
bucket-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
capi-operator
…
capi-providers-bootstrap
fix(kubernetes): address review findings on Talos worker bootstrap
2026-06-23 14:45:53 +05:00
capi-providers-core
fix(capi): add startupProbe to capi-controller-manager to survive cert provisioning delay (#2946)
2026-06-18 10:40:05 +05:00
capi-providers-cpprovider
Prepare release v1.6.1-rc.1
2026-08-04 18:45:25 +00:00
capi-providers-infraprovider
fix(cluster-api): fix kamaji OOM and set limits on unset providers
2026-05-21 12:57:02 +05:00
cert-manager
fix(cert-manager): move the webhook off the kubelet's port
2026-07-20 00:20:06 +03:00
cert-manager-crds
fix(cert-manager): bump chart to v1.20.2
2026-05-03 20:49:47 +05:00
cert-manager-issuers
feat(platform): add deletion-protection guardrail via ValidatingAdmissionPolicy
2026-05-26 14:18:22 +05:00
cilium
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
cilium-networkpolicy
chore(metallb): bump to v0.16.1 and rotate host-network port denylist
2026-05-29 11:07:19 +03:00
clickhouse-operator
…
clickhouse-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
cluster-autoscaler
…
clustersecret-operator
…
coredns
chore(packages/system/coredns): refresh coredns chart to 1.46.0
2026-06-22 21:46:49 +03:00
cozy-proxy
feat(cozy-proxy): bump to v0.3.0
2026-04-28 11:14:27 +02:00
cozystack-api
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
cozystack-basics
fix(cozystack-basics): gate the hostname VAP policies on the VAP API
2026-07-23 11:55:03 +00:00
cozystack-controller
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
cozystack-scheduler
…
dashboard
fix(console): address the review findings on the Admin portal rework
2026-08-24 21:38:01 +00:00
etcd-operator
test(etcd-operator): pin deployment unittest to v0.5.4
2026-08-04 13:49:11 +00:00
etcd-operator-crds
chore(etcd-operator): bump etcd-operator to v0.5.4
2026-08-04 13:49:10 +00:00
etcd-rd
feat(platform): migrate to etcd-operator v1alpha2
2026-07-06 14:41:33 +04:00
external-dns
[external-dns] Set resources requests/limits on external-dns container
2026-07-03 19:14:15 +03:00
external-dns-rd
ci(external-dns): regenerate cozyrds schema for gatewayAPI description
2026-05-25 19:11:52 +03:00
external-secrets-operator
fix(external-secrets): move the webhook off the kubelet's port
2026-07-20 04:49:57 +03:00
flux-plunger
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
flux-shard-operator
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
fluxcd
fix(fluxcd): omit empty distribution.artifact in FluxInstance
2026-07-14 13:10:59 +03:00
fluxcd-operator
feat(fluxcd): bump flux-operator/flux-instance charts to v0.50.0
2026-05-31 19:04:20 +05:00
foundationdb-operator
chore(packages/system/foundationdb-operator): bump fdb-operator to v2.30.0
2026-06-23 03:47:31 +03:00
foundationdb-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
gateway-api-crds
feat: Gateway API support via Cilium
2026-05-25 17:07:02 +03:00
goldpinger
[goldpinger] Set resources requests/limits on goldpinger DaemonSet
2026-07-03 19:14:27 +03:00
gpu-operator
feat(gpu-operator): add container variant for preinstalled host driver
2026-06-08 16:58:51 +03:00
grafana-operator
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
hami
chore(packages/system/hami): bump HAMi to 2.9.0
2026-06-22 19:09:10 +03:00
harbor
feat(harbor): bump chart to 1.19.1 (Harbor 2.15.1)
2026-06-22 10:57:27 +03:00
harbor-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
hetzner-robotlb
chore(hetzner-robotlb): update robotlb chart to appVersion 0.0.6
2026-04-23 16:57:23 +05:00
http-cache-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
info-rd
…
ingress-nginx
…
ingress-rd
feat(ingress): add proxyProtocol knob to ingress-nginx
2026-06-09 12:50:35 +03:00
kafka-operator
…
kafka-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
kamaji
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
keycloak
feat(keycloak): let the KMS proxy trust a private Vault CA
2026-08-28 07:29:22 +00:00
keycloak-configure
fix(keycloak-configure): patch HelmRelease in release namespace on teardown
2026-07-28 15:47:17 +00:00
keycloak-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kilo
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kubeovn
fix(kubeovn): raise ovs-ovn CPU limit to give ovn-controller headroom
2026-06-25 02:38:05 +03:00
kubeovn-plunger
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
kubeovn-webhook
fix(kubeovn-webhook): restrict the webhook port to the API server
2026-08-27 18:07:37 +02:00
kubernetes-nodes-rd
fix(kubernetes-nodes): drop unbacked cluster option source
2026-07-21 22:35:10 +03:00
kubernetes-rd
feat(kubernetes): per-node-group nodeHealthCheck overrides
2026-07-13 12:22:38 +05:00
kuberture
test(kuberture): pin shim contract with helm-unittest
2026-05-14 16:49:00 +03:00
kubevirt
fix(kubevirt): reinsert each GPU CR patch independently in make update
2026-06-08 17:15:00 +03:00
kubevirt-cdi
feat(kubevirt-cdi): make cloneStrategyOverride configurable
2026-07-03 19:14:33 +03:00
kubevirt-cdi-operator
fix(kubevirt-cdi-operator): add startupProbe to survive slow leader election
2026-05-25 11:54:45 +05:00
kubevirt-csi-node
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
kubevirt-instancetypes
fix(kubevirt-instancetypes): restore persistent EFI/TPM state
2026-07-06 09:49:50 +05:00
kubevirt-operator
chore(kubevirt-operator): update to v1.8.4
2026-06-24 15:50:36 +03:00
lineage-controller-webhook
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
linstor
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
linstor-gui
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
linstor-scheduler
fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook
2026-07-16 16:57:41 +03:00
local-ccm
…
mariadb-operator
…
mariadb-rd
fix(mariadb): re-guard replication so single-replica passes the operator webhook
2026-07-02 15:48:29 +03:00
metallb
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
metrics-server
fix(metrics-server): move the listener off the kubelet's port
2026-07-20 05:24:04 +03:00
mongodb-operator
chore(packages/system/mongodb-operator): bump psmdb-operator to 1.22.0
2026-06-22 18:55:38 +03:00
mongodb-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
monitoring
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
monitoring-agents
fix(monitoring-agents): relax fluent-bit probes for loaded installs
2026-06-24 23:38:38 +03:00
monitoring-rd
fix(monitoring): promote oidc.users[].role to required + regenerate schema
2026-07-15 15:31:45 +03:00
multus
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
nats
chore(packages/system/nats): bump nats to 1.3.16
2026-06-22 20:05:54 +03:00
nats-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
nfs-driver
chore(packages/system/nfs-driver): bump csi-driver-nfs to 4.13.3
2026-06-22 18:51:06 +03:00
objectstorage-controller
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
openbao
chore(packages/system/openbao): bump openbao chart to 0.25.7
2026-06-23 03:25:16 +03:00
openbao-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
opencost
chore(packages/system/opencost): bump opencost chart to 2.5.23
2026-06-23 14:39:14 +03:00
opensearch-operator
fix(opensearch-operator): use RollingUpdate maxSurge=0 instead of Recreate
2026-07-20 11:33:35 +05:00
opensearch-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
ouroboros
fix(ouroboros): render controller rollout strategy in every mode
2026-07-16 16:18:37 +03:00
piraeus-operator
…
piraeus-operator-crds
…
postgres-operator
fix(postgres-operator): align CNPG operator and CRDs to 1.28.2 for PVC resize-deadlock fix
2026-08-04 15:18:42 +00:00
postgres-rd
fix(backups): make the barman-cloud serverName stable across every flow
2026-07-16 21:44:41 +04:00
prometheus-operator-crds
fix(prometheus-operator-crds): clean chart dir before helm pull
2026-06-16 14:19:47 +05:00
qdrant
…
qdrant-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
rabbitmq-operator
…
rabbitmq-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
redis-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
redis-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
reloader
[reloader] Set resources requests/limits on reloader container
2026-07-03 19:14:21 +03:00
seaweedfs
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
seaweedfs-db
test: cover flux v2.8 chart fixes and wire missing test targets
2026-05-31 15:02:33 +05:00
seaweedfs-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
securitygroup-controller
Prepare release v1.6.2 (promoted from v1.6.2-rc.1)
2026-08-19 07:31:23 +00:00
snapshot-controller
…
tcp-balancer-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
telepresence
…
tenant-rd
fix(tenant): bump parent HR timeout to 15m to cover seaweedfs split
2026-05-28 12:46:57 +05:00
velero
fix(velero): apply CRD updates on upgrade via CreateReplace
2026-08-10 09:39:57 +00:00
vertical-pod-autoscaler
docs(vertical-pod-autoscaler): fix stale ~350d in checksum/tls-cert ascii timeline
2026-07-03 16:04:46 +03:00
vertical-pod-autoscaler-crds
…
victoria-metrics-operator
…
virtualprivatecloud-rd
…
vm-default-images
fix(vm-default-images): refresh stale Alpine and openSUSE 16.0 image URLs
2026-06-25 12:56:49 +05:00
vm-disk-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
vm-instance-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
vpn-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
vsnap-crd
…
Makefile
…