cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 05:25:14 +09:00

Files

T

Aleksei Sviridkin 8ff38a66f8 docs(cloudflare-tunnel): add the operator guide for the tunnel class

Covers what the package buys over the Cilium GatewayClass, the
Cloudflare-side prerequisites, the single credentials Secret and its
key names, the two-step enable path through bundles.enabledPackages
and the tunnel ID on the emitted Package, how a Gateway joins the
cloudflare-tunnel class, and the limits an operator hits: HTTP and
gRPC only, TLS terminated at the edge, the listeners a tenant
publishing Gateway cannot bring across, neither shipped external-dns
watching Gateway API, the cluster-wide write grant on the
controller's ClusterRole, and unmirrored images.

Also corrects the package header comment, which described moving a
tenant Gateway onto the class as a drop-in. Emptying
tlsPassthroughServices is necessary but not sufficient: the remaining
port-443 listeners are still rendered mode: Terminate with
cert-manager certificateRefs, and the port-443 allowedRoutes.kinds
stay HTTPRoute and TLSRoute, so a GRPCRoute cannot attach.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <3811295@gmail.com>

2026-10-02 14:58:06 +03:00

agents

test(e2e): let HR-Ready waits outlast the install timeout of the release they wait on (#4471 )

2026-10-02 12:15:58 +03:00

changelogs

docs: add changelog for v1.6.4

2026-09-28 07:39:44 +00:00

operations

feat(talos)!: bump Talos to v1.14.2 (#4598 )

2026-10-01 14:03:30 +03:00

security

fix(cozystack-basics): require route hostnames in tenant namespaces