cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 14:02:56 +09:00

Files

T

Aleksei Sviridkin cbf297fa65 docs(kubernetes): describe the UID System-mode OIDC users carry

The aggregation-layer section said System-mode OIDC users have no UID
for the published header to carry, and that mapping a claim for them
was somebody else's change. Both are now false: the chart maps the sub
claim.

An operator upgrading a running cluster needs to know the identity of
those users gained a field. Tenant RBAC never matched on it, but audit
records and kubectl auth whoami show it, and an in-tenant webhook or
extension server that read the empty value now reads the subject.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-22 23:04:28 +03:00

agents

test(e2e): hold the tenant-cluster install wait to an ordering rule (#3802 )

2026-09-22 19:00:52 +04:00

changelogs

docs(release): warn that v1.6.0's naming audit fails open

2026-08-19 14:59:43 +05:00

operations

fix(seaweedfs): raise the number of buckets a volume server can serve

2026-09-17 00:54:48 +03:00

security

fix(cozystack-basics): require route hostnames in tenant namespaces