Claude c90a7b07db fix(kubeovn-webhook): add NetworkPolicy and mTLS support ...

Address unauthenticated access vulnerability (GHSA-g883-q79m-8225) by:
- Adding NetworkPolicy to restrict ingress to kube-system namespace only
- Adding optional mTLS support via --client-ca-file flag for client
  certificate verification

https://claude.ai/code/session_013DRdaUJMYxonsjVpWxJSq3
Signed-off-by: Claude <noreply@anthropic.com>

2026-08-20 14:32:22 +02:00

..

apps

fix(kubernetes): break bootstrap-token Job out of Helm hook to unblock fresh installs (#3887)

2026-08-20 13:47:01 +03:00

core

fix(ci): de-escalate select-e2e and name every escalation (#3817)

2026-08-20 14:12:56 +03:00

extra

test(seaweedfs,api): bound both Roles against a respelled rule

2026-08-08 03:09:47 +03:00

library

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00

system

fix(kubeovn-webhook): add NetworkPolicy and mTLS support

2026-08-20 14:32:22 +02:00

tests/cozy-lib-tests

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00