Alexey Artamonov daf733ad9c fix(keda): narrow autoscaler RBAC and scope the operator-down alert ...

Restrict the KEDA operator ClusterRole: set permissions.operator.restrict.secret
so it drops cluster-wide secret list/watch, and pin rbac.scaledRefKinds to
postgresql.cnpg.io/clusters so it no longer holds a wildcard */scale across every
group.

Gate DatabaseAutoscalerKedaOperatorDown on the presence of keda-hpa-* HPA series
so a tenant running its own Monitoring app (which never scrapes keda_build_info,
root-only) does not fire it forever about a healthy platform component. Make the
two negative containsDocument matchers in the bundles-default test non-vacuous
(any: true) so "KEDA is not installed by default" is actually asserted. Drop the
unused pollingInterval/cooldownPeriod params from the cozy-lib keda helper.

Signed-off-by: Alexey Artamonov <aleksei.artamonov@aenix.io>

2026-09-04 23:19:25 +03:00

..

flux-aio

fix(flux): tune source-watcher concurrency and CPU under load

2026-07-01 07:42:33 +03:00

installer

fix(telemetry): make the documented opt-out cover both collectors

2026-08-12 19:48:37 +02:00

platform

fix(keda): narrow autoscaler RBAC and scope the operator-down alert

2026-09-04 23:19:25 +03:00

talos

fix(ci): gate release tags/pushes off under OCI_EXPORT_DIR (defense-in-depth)

2026-07-29 17:47:28 +05:00

testing

test(e2e): record the runner VM shape and region in the e2e report

2026-08-18 03:31:42 +03:00