ZverGuy 448cd2b5bd feat(observability-proxy): authenticate and authorize with cached reviews ...

The proxy holds no credentials of its own: kube-apiserver answers who a
bearer token belongs to and whether that identity may read a scope, the
same way an aggregated API server would ask through delegated auth.
Both answers are cached briefly so a dashboard polling several panels
does not turn into a review per request, while transport errors are
left uncached so an apiserver blip does not lock users out for the TTL.

Assisted-by: LLM
Signed-off-by: ZverGuy <maximbel2003@gmail.com>

2026-11-09 15:48:57 +07:00

..

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

docs: move the repo-only guides onto the website (#5034)

2026-11-03 23:09:46 +05:00

controller

fix(workloadmonitor): stop doubling the bucket- prefix in bucket Workload names (#5083)

2026-10-28 13:43:42 +04:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

crdinstall

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

fluxcontract

test(fluxcontract): accept a timeout-bounded history read

2026-10-05 17:57:04 +03:00

fluxinstall

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

fluxshardoperator

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

lineagecontrollerwebhook

feat(scheduler): set scheduling-class label on mutated pods

2026-10-01 05:59:24 +03:00

manifestutil

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

marketplace

fix(marketplace): pin a tag-following tap source to the resolved digest

2026-10-22 22:02:49 +03:00

migrationcontroller

fix(migration): restore the class reclaim policy on imported volumes (#4480)

2026-09-29 14:41:04 +03:00

observabilityproxy

feat(observability-proxy): authenticate and authorize with cached reviews

2026-11-09 15:48:57 +07:00

operator

Merge branch 'main' into fix/tap-pin-digest

2026-10-30 14:02:24 +03:00

securitygroupcontroller

refactor(api): keep each app's kind without the apimachinery fork

2026-09-26 16:08:24 +03:00

shared

fix(appdef): let one ApplicationDefinition own each application kind

2026-09-25 09:39:35 +03:00

sse

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

telemetry

fix(telemetry): use APIReader instead of cached client in operator

2026-01-27 18:06:30 +01:00

template

feat(backups): add RabbitMQ definitions backup via a dedicated strategy driver

2026-09-01 18:21:10 +04:00