admin/cozystack
1
0 Fork 0
mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 22:13:18 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
7e7cf7a377ee7302024217465276fc6b8362b821
cozystack/packages/system
T
History
Aleksei Sviridkin 7e7cf7a377 docs(cozystack-basics): record the source/destination gating asymmetry 
The writer policy gates the CA-source surface but not the destination
surface — the <release>.tenant-ca projection a tenant reads. Document why
that is accepted rather than closed: a platform-tier writer that could
forge a projection already has an ungated path through the declared-leg
source, so it is unequal depth rather than an escalation; a destination
gate could not be a clean single-writer pin because the tenant-ca label
has two legitimate producers (this controller and helm-controller); and
the surgical fix is a UID check in lineage owner resolution, tracked as
separate follow-up work.

Signed-off-by: Aleksei Sviridkin <f@lex.la>
2026-07-21 17:16:48 +03:00
..
application-definition-crd
feat(api): constrain the application release prefix to dot-free characters
2026-07-21 17:16:48 +03:00
backup-controller
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
backupstrategy-controller
feat(api): typed waitStrategy/healthCheckExprs for kstatus readiness (#2642) (#3273)
2026-07-21 17:02:37 +05:00
bootbox
refactor(labels): remove cozystack.io/ui label
2026-01-19 13:59:29 +01:00
bootbox-rd
[docs] Updated app go types
2026-03-25 15:57:25 +05:00
bucket
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
bucket-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
capi-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
capi-providers-bootstrap
fix(kubernetes): address review findings on Talos worker bootstrap
2026-06-23 14:45:53 +05:00
capi-providers-core
fix(capi): add startupProbe to capi-controller-manager to survive cert provisioning delay (#2946)
2026-06-18 10:40:05 +05:00
capi-providers-cpprovider
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
capi-providers-infraprovider
fix(cluster-api): fix kamaji OOM and set limits on unset providers
2026-05-21 12:57:02 +05:00
cert-manager
fix(cert-manager): move the webhook off the kubelet's port
2026-07-20 00:20:06 +03:00
cert-manager-crds
fix(cert-manager): bump chart to v1.20.2
2026-05-03 20:49:47 +05:00
cert-manager-issuers
feat(platform): add deletion-protection guardrail via ValidatingAdmissionPolicy
2026-05-26 14:18:22 +05:00
cilium
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
cilium-networkpolicy
chore(metallb): bump to v0.16.1 and rotate host-network port denylist
2026-05-29 11:07:19 +03:00
clickhouse-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
clickhouse-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
cluster-autoscaler
feat(cluster-autoscaler): enable enforce-node-group-min-size by default
2026-02-14 11:42:52 +01:00
clustersecret-operator
Add clustersecret-operator system package
2026-02-10 22:47:20 +05:00
coredns
chore(packages/system/coredns): refresh coredns chart to 1.46.0
2026-06-22 21:46:49 +03:00
cozy-proxy
feat(cozy-proxy): bump to v0.3.0
2026-04-28 11:14:27 +02:00
cozystack-api
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
cozystack-basics
docs(cozystack-basics): record the source/destination gating asymmetry
2026-07-21 17:16:48 +03:00
cozystack-controller
feat(cozystack-controller): run the CA-extraction reconciler
2026-07-21 17:16:46 +03:00
cozystack-scheduler
feat(scheduler): storage-aware scheduling
2026-04-13 17:15:09 +03:00
dashboard
fix(platform): route OIDC backend calls through the in-cluster Keycloak by default
2026-07-14 14:22:46 +03:00
etcd-operator
fix(etcd-operator,backups): address review nits — trim endpoint + hook resources
2026-07-15 19:11:36 +05:00
etcd-operator-crds
chore(etcd-operator): bump to v0.5.2
2026-07-06 14:41:33 +04:00
etcd-rd
feat(platform): migrate to etcd-operator v1alpha2
2026-07-06 14:41:33 +04:00
external-dns
[external-dns] Set resources requests/limits on external-dns container
2026-07-03 19:14:15 +03:00
external-dns-rd
ci(external-dns): regenerate cozyrds schema for gatewayAPI description
2026-05-25 19:11:52 +03:00
external-secrets-operator
fix(external-secrets): move the webhook off the kubelet's port
2026-07-20 04:49:57 +03:00
flux-plunger
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
flux-shard-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
fluxcd
fix(fluxcd): omit empty distribution.artifact in FluxInstance
2026-07-14 13:10:59 +03:00
fluxcd-operator
feat(fluxcd): bump flux-operator/flux-instance charts to v0.50.0
2026-05-31 19:04:20 +05:00
foundationdb-operator
chore(packages/system/foundationdb-operator): bump fdb-operator to v2.30.0
2026-06-23 03:47:31 +03:00
foundationdb-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
gateway-api-crds
feat: Gateway API support via Cilium
2026-05-25 17:07:02 +03:00
goldpinger
[goldpinger] Set resources requests/limits on goldpinger DaemonSet
2026-07-03 19:14:27 +03:00
gpu-operator
feat(gpu-operator): add container variant for preinstalled host driver
2026-06-08 16:58:51 +03:00
grafana-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
hami
chore(packages/system/hami): bump HAMi to 2.9.0
2026-06-22 19:09:10 +03:00
harbor
feat(harbor): bump chart to 1.19.1 (Harbor 2.15.1)
2026-06-22 10:57:27 +03:00
harbor-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
hetzner-robotlb
chore(hetzner-robotlb): update robotlb chart to appVersion 0.0.6
2026-04-23 16:57:23 +05:00
http-cache-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
info-rd
refactor(labels): remove cozystack.io/ui label
2026-01-19 13:59:29 +01:00
ingress-nginx
Replaced direct chart edits with patch files
2026-03-02 12:35:14 +05:00
ingress-rd
feat(ingress): add proxyProtocol knob to ingress-nginx
2026-06-09 12:50:35 +03:00
kafka-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
kafka-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
kamaji
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
keycloak
fix(backups): support cnpg-operator with barman plugin (#3313)
2026-07-21 14:45:52 +04:00
keycloak-configure
feat(keycloak): enable UPDATE_EMAIL required action in cozy realm
2026-07-01 20:25:15 +02:00
keycloak-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kilo
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kubeovn
fix(kubeovn): raise ovs-ovn CPU limit to give ovn-controller headroom
2026-06-25 02:38:05 +03:00
kubeovn-plunger
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kubeovn-webhook
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
kubernetes-rd
feat(kubernetes): per-node-group nodeHealthCheck overrides
2026-07-13 12:22:38 +05:00
kuberture
test(kuberture): pin shim contract with helm-unittest
2026-05-14 16:49:00 +03:00
kubevirt
fix(kubevirt): reinsert each GPU CR patch independently in make update
2026-06-08 17:15:00 +03:00
kubevirt-cdi
feat(kubevirt-cdi): make cloneStrategyOverride configurable
2026-07-03 19:14:33 +03:00
kubevirt-cdi-operator
fix(kubevirt-cdi-operator): add startupProbe to survive slow leader election
2026-05-25 11:54:45 +05:00
kubevirt-csi-node
fix(kubernetes): never auto-select the kubevirt alias as tenant default SC
2026-06-26 21:20:30 +05:00
kubevirt-instancetypes
fix(kubevirt-instancetypes): restore persistent EFI/TPM state
2026-07-06 09:49:50 +05:00
kubevirt-operator
chore(kubevirt-operator): update to v1.8.4
2026-06-24 15:50:36 +03:00
lineage-controller-webhook
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
linstor
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
linstor-gui
fix(platform): route OIDC backend calls through the in-cluster Keycloak by default
2026-07-14 14:22:46 +03:00
linstor-scheduler
fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook
2026-07-16 16:57:41 +03:00
local-ccm
Update local-ccm v0.3.0
2026-02-10 20:19:03 +01:00
mariadb-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
mariadb-rd
fix(mariadb): re-guard replication so single-replica passes the operator webhook
2026-07-02 15:48:29 +03:00
metallb
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
metrics-server
fix(metrics-server): move the listener off the kubelet's port
2026-07-20 05:24:04 +03:00
mongodb-operator
chore(packages/system/mongodb-operator): bump psmdb-operator to 1.22.0
2026-06-22 18:55:38 +03:00
mongodb-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
monitoring
fix(monitoring): set groups_attribute_path=groups so allowed_groups actually works on Grafana v11.x
2026-07-15 15:31:45 +03:00
monitoring-agents
fix(monitoring-agents): relax fluent-bit probes for loaded installs
2026-06-24 23:38:38 +03:00
monitoring-rd
fix(monitoring): promote oidc.users[].role to required + regenerate schema
2026-07-15 15:31:45 +03:00
multus
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
nats
chore(packages/system/nats): bump nats to 1.3.16
2026-06-22 20:05:54 +03:00
nats-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
nfs-driver
chore(packages/system/nfs-driver): bump csi-driver-nfs to 4.13.3
2026-06-22 18:51:06 +03:00
objectstorage-controller
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
openbao
chore(packages/system/openbao): bump openbao chart to 0.25.7
2026-06-23 03:25:16 +03:00
openbao-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
opencost
chore(packages/system/opencost): bump opencost chart to 2.5.23
2026-06-23 14:39:14 +03:00
opensearch-operator
fix(opensearch-operator): use RollingUpdate maxSurge=0 instead of Recreate
2026-07-20 11:33:35 +05:00
opensearch-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
ouroboros
fix(ouroboros): render controller rollout strategy in every mode
2026-07-16 16:18:37 +03:00
piraeus-operator
[piraeus-operator] Split LINSTOR controller availability and metrics alerts
2026-03-25 16:11:14 +03:00
piraeus-operator-crds
Move CRDs installation logic to piraeus-operator-crds chart
2026-02-11 22:54:56 +01:00
postgres-operator
fix(backups): migrate CNPG backups to the barman-cloud plugin
2026-07-16 21:44:41 +04:00
postgres-rd
feat(postgres): publish the CA trust anchor to tenants
2026-07-21 17:16:47 +03:00
prometheus-operator-crds
fix(prometheus-operator-crds): clean chart dir before helm pull
2026-06-16 14:19:47 +05:00
qdrant
[qdrant] Add Qdrant vector database application
2026-02-06 13:30:58 +03:00
qdrant-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
rabbitmq-operator
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
rabbitmq-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
redis-operator
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
redis-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
reloader
[reloader] Set resources requests/limits on reloader container
2026-07-03 19:14:21 +03:00
seaweedfs
test(seaweedfs): pin the naming guard's MultiZone zone-component classification
2026-07-20 15:40:49 +05:00
seaweedfs-db
test: cover flux v2.8 chart fixes and wire missing test targets
2026-05-31 15:02:33 +05:00
seaweedfs-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
securitygroup-controller
chore(deps): update container image & action digests
2026-07-10 05:29:23 +00:00
snapshot-controller
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
tcp-balancer-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
telepresence
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
tenant-rd
fix(tenant): bump parent HR timeout to 15m to cover seaweedfs split
2026-05-28 12:46:57 +05:00
velero
fix(velero): add startupProbe so slow startup does not crashloop the install gate
2026-07-01 06:04:22 +03:00
vertical-pod-autoscaler
docs(vertical-pod-autoscaler): fix stale ~350d in checksum/tls-cert ascii timeline
2026-07-03 16:04:46 +03:00
vertical-pod-autoscaler-crds
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
victoria-metrics-operator
feat(monitoring): upgrade victoria-metrics-operator to v0.68.4
2026-04-20 15:48:53 +03:00
virtualprivatecloud-rd
[docs] Update cozyvalues-gen
2026-03-25 15:59:22 +05:00
vm-default-images
fix(vm-default-images): refresh stale Alpine and openSUSE 16.0 image URLs
2026-06-25 12:56:49 +05:00
vm-disk-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
vm-instance-rd
chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options
2026-06-02 16:42:58 +03:00
vpn-rd
feat(apps): instance-type resourcesPreset across apps and extras
2026-05-11 21:08:41 +03:00
vsnap-crd
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00
Makefile
refactor: move scripts to hack directory
2026-01-15 16:06:56 +01:00