cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 05:25:14 +09:00

Files

T

Yan Bondarenko 9ee2a2375c fix(foundationdb): let tenant roles read the connection ConfigMap

The operator stores the cluster file in the <release>-config ConfigMap,
but the dashboard resource map did not list it and no RBAC granted
tenant subjects access to it, so a tenant could not retrieve the
connection string for its own FoundationDB at all.

Add the ConfigMap to the dashboard resource map and create a
Role/RoleBinding scoped to exactly that ConfigMap (get/list/watch)
for the tenant use-level subjects. Add helm unittest coverage.

Signed-off-by: Yan Bondarenko <202671653+yankawai@users.noreply.github.com>

2026-09-18 05:54:46 +04:00

bucket

fix(bucket): stop the ACME cleanup hook from talking to localhost, and gate the class

2026-09-17 09:32:07 +03:00

clickhouse

fix(clickhouse): keep the Keeper name inside the StatefulSet volume-name limit

2026-09-09 17:54:04 +03:00

foundationdb

fix(foundationdb): let tenant roles read the connection ConfigMap

2026-09-18 05:54:46 +04:00

harbor

fix(harbor): give the nginx proxy explicit resources so it survives the tenant LimitRange

2026-09-06 21:23:34 +03:00

http-cache

fix(http-cache,vpa): fix haproxy 3.3 backend name conflict and vpa-for-vpa OOM (#2654 )

2026-07-22 20:57:45 +03:00

kafka

docs(kafka): say why the hook's Job and its credentials are reaped differently

2026-09-17 13:21:31 +03:00

kubernetes

fix(kubernetes): pin KubeVirt CSI sidecars to SIG Storage releases (#3934 )

2026-09-18 03:48:47 +04:00

kubernetes-nodes

fix(computeplane): provision worker pools via kubernetes-nodes after Phase 2 split

2026-08-24 11:19:54 +03:00

mariadb

test(mariadb): bind the uninstall Secret names to the delete that removes them

2026-09-03 21:04:30 +03:00

mongodb

docs(mongodb): name the trust anchor as the tenant sees it

2026-09-01 11:20:34 +03:00

nats

docs(nats): say that the trust anchor exists only while TLS is on

2026-08-15 22:40:59 +03:00

openbao

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

opensearch

fix(opensearch): give the securityconfig update job its own resources

2026-09-13 22:00:12 +03:00

postgres

test(postgres): assert the job pin on each autoscaler selector, not once for the query

2026-09-10 15:31:31 +03:00

qdrant

feat(qdrant): publish ca.crt-only trust anchor to tenants (#3341 )

2026-09-01 13:10:37 +04:00

rabbitmq

docs(rabbitmq): say that deleting the application leaves the TLS Secrets behind

2026-09-07 21:59:35 +03:00

redis

docs(redis): point the SAN comment at the function the patch defines

2026-09-02 17:58:06 +03:00

tcp-balancer

docs(apps): point seven app README preset tables at canonical docs

2026-05-12 03:08:52 +03:00

tenant

fix(seaweedfs): raise the number of buckets a volume server can serve

2026-09-17 00:54:48 +03:00

valkey

fix(valkey): label RedisFailover with operator-group so it is reconciled

2026-09-01 13:22:29 +04:00

vm-disk

feat(vm-disk): let the operator defer binding to the consumer

2026-09-07 16:27:24 +05:00

vm-instance

fix(virtual-machine): guard Kube-OVN IP lookup (#4013 )

2026-09-11 15:12:43 +04:00

vpc

[docs] Update cozyvalues-gen

2026-03-25 15:59:22 +05:00

vpn

fix(apps/vpn): remove invalid foo field from urls Secret

2026-07-13 23:32:24 +03:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

README.md

[clickhouse] add clickhouse keeper

2025-08-07 14:07:05 +03:00

README.md

How to test packages local

cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd