cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-12 23:54:01 +09:00

Files

T

Timofei Larkin 7b214464ee fix(lineage-webhook): keep an explicit tenantresource false

The webhook computes the tenantresource verdict from the ApplicationDefinition selectors on first admission and copies it over whatever label the chart rendered, so a chart cannot take a Secret the definition still selects off the tenantsecrets projection. The credentials conversion in design-proposals/user-secrets-api needs exactly that during its migration window: the converted chart renders the platform-only credentials Secret with tenantresource false while the old definition still selects the name.

A rendered false is now kept; a rendered true is still replaced by the computed verdict, so the object can only narrow what the definition grants, never widen it.

Assisted-by: LLM
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>

2026-11-12 13:56:16 +03:00

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

feat(backups): record the RDB snapshot location and size for Redis backups (#5046 )

2026-11-11 15:52:54 +04:00

controller

fix(workloadmonitor): stop doubling the bucket- prefix in bucket Workload names (#5083 )

2026-10-28 13:43:42 +04:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers