cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-04 02:57:27 +09:00

Files

T

Алексей Артамонов d988b3e8c8 fix(apiserver): read tenant pool quota usage via direct client and grant RBAC

parentPoolUsage listed ResourceQuotas through the aggregated apiserver's cached
client, which lazily starts a cluster-wide ResourceQuota informer. cozystack-api
has no RBAC to list resourcequotas, so the informer never synced and tenant
create/update of a bounded child hung until the request timed out (observed on a
cluster). Read quota usage through the direct (uncached) watch client instead,
scoped to the pool's member namespaces, so no cluster-wide informer is started,
and grant cozystack-api get/watch/list on resourcequotas for those reads.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Алексей Артамонов <alexeyartamonov1987@gmail.com>

2026-06-30 16:12:17 +02:00

apis

fix(securitygroup): project rules-less SecurityGroup to a valid policy

2026-06-30 00:36:09 +03:00

apiserver

feat(sdn): wire SecurityGroup into the aggregated apiserver

2026-06-22 16:35:10 +03:00

cmd/server

feat(api): add SecurityGroup network policy resource (sdn.cozystack.io) (#2922 )

2026-06-30 14:30:23 +03:00

config

fix(kubernetes): run the Talos reconcile Job in the main install phase