cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-13 08:05:19 +09:00

Files

T

ZverGuy bb073eec1b fix(observability-proxy): do not cache reviews that failed to decide

A TokenReview whose authenticator failed comes back unauthenticated
with status.error set, and a SubjectAccessReview whose authorizer
failed comes back with an evaluation error and no decision. Both were
cached as refusals, so a valid caller stayed locked out for the cache
TTL after the outage ended.

Such answers are now refused for the current request only. A review
that failed to decide still answers 401 or 403 rather than 503: RBAC
sets an evaluation error for any binding to a missing role, which a
retryable status would turn into a permanent 503 for that user.

Assisted-by: LLM
Signed-off-by: ZverGuy <maximbel2003@gmail.com>

2026-11-10 00:45:06 +07:00

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

docs: move the repo-only guides onto the website (#5034 )

2026-11-03 23:09:46 +05:00

controller

fix(workloadmonitor): stop doubling the bucket- prefix in bucket Workload names (#5083 )

2026-10-28 13:43:42 +04:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers