admin/cozystack
1
0 Fork 0
mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 05:25:14 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
626e1fe19d353992fa89ea207798a342e4002fe2
cozystack/packages/system
T
History
Aleksei Sviridkin 09a658d43b test(dashboard): pin JWT verification in the token proxy 
Only the cold-start path of verifyAndParseJWT was tested; every other
test served an empty JWKS, so no token was ever verified and a change
that weakened verification would have passed. Cover a valid token and
the ones that must be refused: expired, not yet valid, signed by
another key, unknown or missing kid, alg none, and HS256 keyed with
the RSA public key.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>
2026-09-24 16:55:02 +03:00
..
application-definition-crd
docs(api): separate the healthCheckExprs failure modes
2026-09-23 00:05:35 +03:00
backup-controller
Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
2026-07-22 13:00:10 +00:00
backupstrategy-controller
docs(backups): correct the Kafka .Mode doc and the embedded-script templating note
2026-09-14 17:55:48 +04:00
bootbox
refactor(labels): remove cozystack.io/ui label
2026-01-19 13:59:29 +01:00
bootbox-rd
[docs] Updated app go types
2026-03-25 15:57:25 +05:00
bucket
fix(platform): declare the injected _cluster values in system charts
2026-09-07 02:23:47 +03:00
bucket-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
capi-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
capi-providers-bootstrap
fix(kubernetes): address review findings on Talos worker bootstrap
2026-06-23 14:45:53 +05:00
capi-providers-core
fix(capi): add startupProbe to capi-controller-manager to survive cert provisioning delay (#2946)
2026-06-18 10:40:05 +05:00
capi-providers-cpprovider
fix(ci): emit a single tag for capi-providers under OCI export (#3257)
2026-07-29 17:47:26 +05:00
capi-providers-infraprovider
docs(cluster-api): explain the omitted migration priority by the pinned API
2026-09-18 17:30:13 +04:00
cert-manager
fix(cert-manager): move the webhook off the kubelet's port
2026-07-20 00:20:06 +03:00
cert-manager-crds
test(cert-manager-crds): pin the keep annotation on the CRDs
2026-08-07 14:36:06 +03:00
cert-manager-issuers
fix(platform): declare the injected _cluster values in system charts
2026-09-07 02:23:47 +03:00
cilium
[cilium] Set resources requests/limits on cilium-operator (#2618)
2026-09-04 16:30:49 +05:00
cilium-networkpolicy
test(system): anchor index-addressed negative asserts to what they name
2026-08-12 15:28:37 +03:00
clickhouse-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
clickhouse-rd
feat(clickhouse): add configurable version parameter
2026-08-24 23:41:27 +03:00
cluster-autoscaler
feat(cluster-autoscaler): enable enforce-node-group-min-size by default
2026-02-14 11:42:52 +01:00
clustersecret-operator
Add clustersecret-operator system package
2026-02-10 22:47:20 +05:00
computeplane-rd
docs(computeplane): nodeGroups allowlist drops unlisted fields, not pass-through
2026-08-25 16:39:19 +03:00
coredns
chore(packages/system/coredns): refresh coredns chart to 1.46.0
2026-06-22 21:46:49 +03:00
cozy-proxy
feat(cozy-proxy): bump to v0.3.0
2026-04-28 11:14:27 +02:00
cozystack-api
feat(marketplace): register a tapped repository's apps on connect
2026-09-21 21:57:04 +03:00
cozystack-basics
fix(platform): freeze HTTPCache on the artifact the cluster runs
2026-09-18 13:12:56 +03:00
cozystack-controller
chore(cozystack-controller): name the Service and ReferenceGrant reads
2026-09-10 18:47:30 +03:00
cozystack-scheduler
[cozystack-scheduler] Publish SchedulingClass demo (#2252)
2026-07-30 14:20:18 +05:00
dashboard
test(dashboard): pin JWT verification in the token proxy
2026-09-24 16:55:02 +03:00
etcd-operator
chore(etcd-operator): bump to v0.5.6
2026-09-23 21:22:43 +04:00
etcd-operator-crds
chore(etcd-operator): bump to v0.5.6
2026-09-23 21:22:43 +04:00
etcd-rd
docs(etcd): note that affinity is not applied to existing members
2026-09-01 12:47:46 +03:00
external-dns
[external-dns] Set resources requests/limits on external-dns container
2026-07-03 19:14:15 +03:00
external-dns-rd
ci(external-dns): regenerate cozyrds schema for gatewayAPI description
2026-05-25 19:11:52 +03:00
external-secrets-operator
fix(external-secrets): move the webhook off the kubelet's port
2026-07-20 04:49:57 +03:00
flux-plunger
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
flux-shard-operator
fix(flux-shard-operator): repair sharded helm-controller crashloop behind an HTTP proxy (#3546)
2026-08-14 13:28:51 +03:00
forklift
feat(migration): tenant self-service VM import from VMware vSphere
2026-09-07 17:03:44 +02:00
forklift-operator
feat(migration): tenant self-service VM import from VMware vSphere
2026-09-07 17:03:44 +02:00
foundationdb-operator
chore(packages/system/foundationdb-operator): bump fdb-operator to v2.30.0
2026-06-23 03:47:31 +03:00
foundationdb-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
gateway-api-crds
test(gateway-api-crds): pin the vendored bundle version in the suite
2026-09-03 22:17:04 +03:00
goldpinger
[goldpinger] Set resources requests/limits on goldpinger DaemonSet
2026-07-03 19:14:27 +03:00
gpu-operator
fix(platform): accept the container gpu-operator variant in iaas (#4101)
2026-09-08 02:50:33 +04:00
grafana-operator
build(grafana-operator): mirror Grafana catalog plugins into the dashboards image
2026-07-24 16:08:51 +02:00
hami
chore(packages/system/hami): bump HAMi to 2.9.0
2026-06-22 19:09:10 +03:00
harbor
test(harbor): assert the operator-group label and pinned engine
2026-08-19 10:15:58 +02:00
harbor-rd
fix(harbor-rd): carry the release prefix in the resource selectors
2026-09-08 22:45:33 +02:00
hetzner-robotlb
chore(hetzner-robotlb): update robotlb chart to appVersion 0.0.6
2026-04-23 16:57:23 +05:00
info-rd
refactor(labels): remove cozystack.io/ui label
2026-01-19 13:59:29 +01:00
ingress-nginx
feat(ingress-nginx): restrict the admission webhook to the API server
2026-09-07 17:03:44 +02:00
ingress-rd
feat(ingress): add proxyProtocol knob to ingress-nginx
2026-06-09 12:50:35 +03:00
kafka-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
kafka-rd
feat(apps): declare the Kubernetes and Kafka name caps in their charts
2026-09-23 10:59:51 +03:00
kamaji
feat(kubernetes)!: remove the FluxCD tenant addon
2026-08-20 13:34:32 +03:00
keda
fix(keda): pin job=kube-state-metrics in the ScaleStuck Pending join
2026-09-08 16:35:57 +03:00
keycloak
fix(keycloak): validate the realm list wherever it is set
2026-09-22 10:54:28 +05:00
keycloak-configure
fix(platform): reject non-string realm names and shell-quote the hook realm
2026-09-21 12:15:10 +03:00
keycloak-operator
fix(keycloak): keep KeycloakRealmUser roles when spec.roles is unset
2026-08-12 18:42:14 +03:00
kilo
test(system): anchor index-addressed negative asserts to what they name
2026-08-12 15:28:37 +03:00
kubeovn
docs(kube-ovn): point the update comment at the test that asks for the fixture
2026-09-22 22:47:57 +03:00
kubeovn-plunger
Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
2026-07-22 13:00:10 +00:00
kubeovn-webhook
docs(networking): stop claiming the churn coupling is removed
2026-09-02 20:52:06 +05:00
kubernetes-nodes-rd
feat(kubernetes): boot tenant worker disks from a shared golden Talos image
2026-09-23 15:35:44 +03:00
kubernetes-rd
feat(apps): declare the Kubernetes and Kafka name caps in their charts
2026-09-23 10:59:51 +03:00
kubernetes-worker-image
feat(kubernetes): boot tenant worker disks from a shared golden Talos image
2026-09-23 15:35:44 +03:00
kuberture
test(kuberture): pin shim contract with helm-unittest
2026-05-14 16:49:00 +03:00
kubevirt
fix(kubevirt)!: evict non-migratable VMs instead of blocking the drain (#4403)
2026-09-24 15:57:44 +04:00
kubevirt-cdi
fix(cdi): validate kubevirt-cdi values against a schema (#4417)
2026-09-23 20:07:06 +04:00
kubevirt-cdi-operator
fix(kubevirt-cdi-operator): pin the vendored CDI release
2026-09-22 23:45:58 +03:00
kubevirt-csi-node
fix(kubernetes): pin KubeVirt CSI sidecars to SIG Storage releases
2026-08-21 15:51:53 +03:00
kubevirt-instancetypes
fix(kubevirt-instancetypes): restore persistent EFI/TPM state
2026-07-06 09:49:50 +05:00
kubevirt-operator
test(kubevirt): add a unit-test target for the operator package
2026-09-07 01:23:29 +03:00
lineage-controller-webhook
Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
2026-07-22 13:00:10 +00:00
linstor
fix(linstor): wait for temporary probe devices
2026-09-18 17:30:00 +04:00
linstor-gui
fix(keycloak): complete realm-name coverage and guard non-string names
2026-09-21 12:15:10 +03:00
linstor-scheduler
fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook
2026-07-16 16:57:41 +03:00
local-ccm
Update local-ccm v0.3.0
2026-02-10 20:19:03 +01:00
mariadb-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
mariadb-rd
docs(mariadb): correct what names the trust anchor and what lineage resolves
2026-09-03 20:31:39 +03:00
metallb
fix(platform): give node DaemonSets memory requests and limits
2026-08-13 16:47:52 +05:00
metrics-server
fix(metrics-server): move the listener off the kubelet's port
2026-07-20 05:24:04 +03:00
migration-controller
feat(migration): tenant self-service VM import from VMware vSphere
2026-09-07 17:03:44 +02:00
mongodb-operator
chore(packages/system/mongodb-operator): bump psmdb-operator to 1.22.0
2026-06-22 18:55:38 +03:00
mongodb-rd
fix(mongodb): declare the trust anchor with a TenantProjection
2026-09-01 11:20:32 +03:00
monitoring
fix(platform): reject non-string realm names and shell-quote the hook realm
2026-09-21 12:15:10 +03:00
monitoring-agents
fix(monitoring): pin the scrape size rendering and sharpen the alert
2026-09-23 20:56:07 +03:00
monitoring-rd
fix(monitoring): promote oidc.users[].role to required + regenerate schema
2026-07-15 15:31:45 +03:00
multus
fix(multus): move kube-ovn CNI plugins marker to v1.15.26
2026-09-22 13:08:39 +03:00
nats
chore(packages/system/nats): bump nats to 1.3.16
2026-06-22 20:05:54 +03:00
nats-rd
feat(nats): publish ca.crt-only trust anchor to tenants
2026-08-12 18:42:13 +03:00
nfs-driver
chore(packages/system/nfs-driver): bump csi-driver-nfs to 4.13.3
2026-06-22 18:51:06 +03:00
objectstorage-controller
Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
2026-07-22 13:00:10 +00:00
openbao
chore(packages/system/openbao): bump openbao chart to 0.25.7
2026-06-23 03:25:16 +03:00
openbao-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
opencost
chore(packages/system/opencost): bump opencost chart to 2.5.23
2026-06-23 14:39:14 +03:00
opensearch-operator
build(opensearch-operator): run the patched tree's tests under -race
2026-09-22 22:50:24 +03:00
opensearch-rd
feat(opensearch)!: issue the HTTP API certificate from cert-manager
2026-09-11 01:23:13 +03:00
ouroboros
test(system): anchor index-addressed negative asserts to what they name
2026-08-12 15:28:37 +03:00
piraeus-operator
[piraeus-operator] Split LINSTOR controller availability and metrics alerts
2026-03-25 16:11:14 +03:00
piraeus-operator-crds
Move CRDs installation logic to piraeus-operator-crds chart
2026-02-11 22:54:56 +01:00
postgres-operator
docs(postgres-operator): distinguish chart version from appVersion in comment
2026-08-25 18:52:30 +03:00
postgres-rd
docs(postgres): correct the KEDA-guard rationale and note the gradual client-side rollout
2026-09-09 21:36:54 +03:00
prometheus-operator-crds
fix(prometheus-operator-crds): keep the CRDs on uninstall
2026-08-07 14:37:46 +03:00
qdrant
[qdrant] Add Qdrant vector database application
2026-02-06 13:30:58 +03:00
qdrant-rd
feat(qdrant): publish ca.crt-only trust anchor to tenants
2026-08-09 21:06:46 +03:00
rabbitmq-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
rabbitmq-rd
fix(rabbitmq): describe the preset as filling what resources leaves unset
2026-09-22 17:47:55 +04:00
redis-operator
build(redis-operator): carry TLS support as a downstream patch
2026-09-02 17:58:06 +03:00
redis-rd
build(redis-operator): carry TLS support as a downstream patch
2026-09-02 17:58:06 +03:00
reloader
fix(reloader): add startupProbe to survive slow first start under load
2026-07-28 12:16:57 +03:00
seaweedfs
fix(seaweedfs): raise the number of buckets a volume server can serve
2026-09-17 00:54:48 +03:00
seaweedfs-db
test: cover flux v2.8 chart fixes and wire missing test targets
2026-05-31 15:02:33 +05:00
seaweedfs-rd
fix(seaweedfs): raise the number of buckets a volume server can serve
2026-09-17 00:54:48 +03:00
securitygroup-controller
Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
2026-07-22 13:00:10 +00:00
snapshot-controller
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
talos-log-collector
test(talos-log-collector): pin listenPort override into Cilium NetworkPolicy port
2026-07-23 18:19:59 +03:00
tcp-balancer-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
telepresence
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
tenant-rd
feat(platform): let a tenant pick its Gateway class from an allowlist
2026-09-04 14:26:54 +03:00
valkey-rd
feat(valkey): register Valkey application in the platform
2026-09-01 11:43:10 +04:00
velero
fix(platform): give node DaemonSets memory requests and limits
2026-08-13 16:47:52 +05:00
vertical-pod-autoscaler
fix(http-cache,vpa): fix haproxy 3.3 backend name conflict and vpa-for-vpa OOM (#2654)
2026-07-22 20:57:45 +03:00
vertical-pod-autoscaler-crds
fix(vertical-pod-autoscaler-crds): keep the CRDs on uninstall
2026-08-07 14:37:46 +03:00
victoria-metrics-operator
feat(monitoring): upgrade victoria-metrics-operator to v0.68.4
2026-04-20 15:48:53 +03:00
virtualprivatecloud-rd
[docs] Update cozyvalues-gen
2026-03-25 15:59:22 +05:00
vm-default-images
fix(vm-default-images): refresh stale Alpine and openSUSE 16.0 image URLs
2026-06-25 12:56:49 +05:00
vm-disk-rd
feat(vm-disk): let the operator defer binding to the consumer
2026-09-07 16:27:24 +05:00
vm-instance-rd
fix(vm-instance): disable helm readiness wait on the VMInstance release (#3735)
2026-09-24 14:30:23 +04:00
vpn-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
vsnap-crd
fix(vsnap-crd): keep the CRDs when the release is uninstalled
2026-08-07 14:37:46 +03:00
.gitattributes
chore(codeowners): don't gate per-app generated files on architect review
2026-08-03 14:08:36 +03:00
Makefile
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00