cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-03 10:37:21 +09:00

Files

T

Ivan Okhotnikov 5d13c15d65 fix(apps/kubernetes): compile OIDC groups claim rule via dyn() so the tenant apiserver boots

The System-mode AuthenticationConfiguration rendered a claimValidationRule
ranging over claims.groups, which is statically typed `any` in the apiserver
CEL environment. The .exists() comprehension rejects a range of type any, so
the tenant kube-apiserver failed config compilation at startup and CrashLooped
— the control plane never booted and cluster teardown then hung the e2e
cleanup budget. Wrap the range in dyn() so CEL treats it as dynamic; the has()
guard still short-circuits when groups is absent and the gate semantics are
unchanged. Strengthen the oidc unit test to pin dyn() (mutation-verified).
Verified on a live tenant apiserver (v1.32).

Signed-off-by: Ivan Okhotnikov <xorokhotnikov@gmail.com>

2026-07-15 15:31:45 +03:00

bucket

fix(bucket): drop no-op label-based order/challenge delete

2026-06-29 23:10:24 +03:00

clickhouse

chore(deps): update altinity/clickhouse-backup docker tag to v2.7.4

2026-07-10 07:24:26 +00:00

foundationdb

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

harbor

docs(harbor): fix SeaweedFS discovery key described as annotation

2026-07-14 13:45:19 +03:00

http-cache

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

kafka

fix(kafka): set entity-operator resources to avoid OOM under tenant LimitRange

2026-06-23 13:44:29 +05:00

kubernetes

fix(apps/kubernetes): compile OIDC groups claim rule via dyn() so the tenant apiserver boots

2026-07-15 15:31:45 +03:00

mariadb

chore(deps): update container image & action digests

2026-07-10 05:29:23 +00:00

mongodb

chore(packages/apps/mongodb): bump CR version to 1.22.0

2026-06-22 18:55:38 +03:00

nats

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

openbao

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

opensearch

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

postgres

Merge origin/main into feat/e2e-chainsaw-example

2026-07-08 18:04:08 +05:00

qdrant

fix(qdrant): anchor PVC ordinal so cleanup never deletes a sibling's data

2026-06-30 14:17:14 +03:00

rabbitmq

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

redis

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

tcp-balancer

docs(apps): point seven app README preset tables at canonical docs

2026-05-12 03:08:52 +03:00

tenant

fix(tenant): emit full ancestor label chain on tenant namespaces

2026-07-03 09:51:49 +03:00

vm-disk

fix(hooks): run the refreshed alpine/k8s kubectl hooks non-root

2026-06-22 21:26:42 +03:00

vm-instance

fix(hooks): run the refreshed alpine/k8s kubectl hooks non-root

2026-06-22 21:26:42 +03:00

vpc

[docs] Update cozyvalues-gen

2026-03-25 15:59:22 +05:00

vpn

fix(apps/vpn): remove invalid foo field from urls Secret

2026-07-13 23:32:24 +03:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

README.md

[clickhouse] add clickhouse keeper

2025-08-07 14:07:05 +03:00

README.md

How to test packages local

cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd