Aleksei Sviridkin 564e1d95d9 feat(api): add TenantProjection CRD for declared tenant-visible projections ...

Introduce the namespaced internal.cozystack.io/v1alpha1 group and its
TenantProjection kind. A chart renders this sentinel to declare which
of an application's Secrets should be published to its tenant as a
key-free copy; the controller reconciles the projected Secret from it.

No tenant RBAC role grants any verb on internal.cozystack.io, so the
sentinel cannot be forged from a tenant namespace.

Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-07-21 17:16:49 +03:00

..

cozystack.io_workloadmonitors.yaml

Fix: move controller crds to definitions

2025-12-25 12:56:53 +01:00

cozystack.io_workloads.yaml

Fix: move controller crds to definitions

2025-12-25 12:56:53 +01:00

gateway.cozystack.io_tenantgateways.yaml

feat(tenantgateway): add existingSecret cert mode for operator wildcard

2026-06-10 03:08:07 +03:00

internal.cozystack.io_tenantprojections.yaml

feat(api): add TenantProjection CRD for declared tenant-visible projections

2026-07-21 17:16:49 +03:00