Aleksei Sviridkin 67692b4544 feat(platform,ingress): publish host ingress via ServiceExposure ...

Add the operator-facing knob that drives the new exposure model. When
publishing.exposureClass.name is set, the platform renders a cluster-scoped
ExposureClass binding the chosen backend (externalIPs, metallb, cilium,
robotlb) and VIP address scope, and carries the class name through the
cozystack-values Secret. The host ingress then renders a ServiceExposure
for its ingress-nginx Service, which the cozystack-controller translates
into the backend's pool and announcer.

The default (empty name) renders neither the ExposureClass nor the
ServiceExposure, so clusters on the externalIPs path are unchanged on
upgrade. The ingress Service shape is untouched: it is already published
as type LoadBalancer whenever externalIPs is empty.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-25 20:47:19 +03:00

..

apps

fix(tenant): grant watch verb to cleanup Role so pre-delete hook can wait (#2923)

2026-06-25 12:29:04 +03:00

core

feat(platform,ingress): publish host ingress via ServiceExposure

2026-06-25 20:47:19 +03:00

extra

feat(platform,ingress): publish host ingress via ServiceExposure

2026-06-25 20:47:19 +03:00

library

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00

system

feat(controller): reconcile ServiceExposure into backend LB resources

2026-06-25 20:47:19 +03:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00