Alexey Artamonov cc51cac63d fix(monitoring): give a central tenant's Grafana a login that cannot write ...

The collector holds a central tenant to its write rate, but the one
login it writes with was also the login of the tenant's Grafana
datasource, and it could both read and write. vmauth cleans the request
path before it picks a route, so any user the tenant admits to its
Grafana, a Viewer included, could POST through the datasource proxy to
../insert and write into the shared store past the limiter.

Each central tenant now has two VMUsers on its one account: the
collector's, which may only write, and Grafana's, which may only read,
each with its own chart-owned Secret and password. A namespace name
holds no dot, so the reader's username never matches another tenant's.
On upgrade the datasource moves to the new login in the same release
that creates it, so reads may fail until vmauth loads the new user.

Signed-off-by: Alexey Artamonov <aleksei.artamonov@aenix.io>

2026-10-06 09:39:04 +03:00

..

e2e-chainsaw

fix(e2e): fail on a failed release of cilium and csi as on the parent, and report addon remediation (#3594)

2026-10-05 17:12:38 +03:00

lib

fix(release): collect refs stored as registry/image/tag/digest keys

2026-10-02 05:40:47 +03:00

packages-index

fix(marketplace): prune stale taps, preserve source state, scope RBAC, pull by digest

2026-09-07 10:58:37 +03:00

testdata

fix(platform): resume a retried migration Job from the stamped version

2026-10-02 21:54:46 +03:00

admin-kubeconfig-invariant.bats

test(hack): clean up bats temp dirs without EXIT traps

2026-08-05 16:03:57 +03:00

alert-severity-contract.bats

test(monitoring): guard alert severities against the Alerta alarm model

2026-09-30 13:53:06 +03:00

app-cleanup-hooks_test.bats

fix(apps): make the post-delete cleanup hooks report failure

2026-08-12 18:43:02 +03:00

backup-access-preflight.bats

fix(e2e): delete the failed S3 preflight object through a live tunnel

2026-10-01 02:10:21 +03:00

backup-examples-shared-helpers.bats

refactor(backups): define the walkthrough wait helpers once

2026-10-01 02:21:01 +03:00

bats-no-exit-trap.bats

test(monitoring): remove orphaned OIDC BATS suites

2026-09-24 16:28:00 +05:00

bats-no-negated-assert.bats

test(bats): refuse a negated assertion across every suite

2026-10-02 15:09:20 +03:00

bats-runner-coverage.bats

build(make): keep running bats unit files after one fails

2026-10-01 02:09:49 +03:00

bats-unit-keep-going.bats

build(make): keep running bats unit files after one fails

2026-10-01 02:09:49 +03:00

boilerplate.go.txt

Introduce cozystack-controller (#560)

2025-01-09 12:24:51 +01:00

build-matrix_test.bats

test(bats): widen the comments describing the errexit exemption

2026-10-02 15:09:20 +03:00

build-matrix.sh

feat(build): stitch amd64 and arm64 builds into multi-arch indexes

2026-09-27 07:57:30 +03:00

build-talos-gating_test.bats

ci(workflows): gate Talos builds on their inputs

2026-09-10 17:48:22 +05:00

build-talos-needed.sh

ci(workflows): gate Talos builds on their inputs

2026-09-10 17:48:22 +05:00

buildkitd.toml

ci(build): route PR base-image pulls through mirror.gcr.io

2026-06-24 23:17:25 +03:00

capi-core-components_test.bats

fix(capi): ship the core provider manifests the repository actually holds

2026-09-25 16:26:13 +02:00

capi-provider-components_test.bats

test(capi): catch a vendored provider whose blob and YAML have drifted

2026-09-25 16:26:05 +02:00

capk-provider_test.bats

test(cluster-api): declare the subshell EXIT traps in the CAPK bats suite

2026-09-18 17:30:13 +04:00

capture-dataplane.bats

fix(e2e): bound the dataplane capture collector by wall clock (#4640)

2026-10-05 14:10:25 +03:00

capture-previous-logs.bats

test(bats): widen the comments describing the errexit exemption

2026-10-02 15:09:20 +03:00

cdi_golden_image_create.sh

[vm-default-images] Added new optional package

2026-04-14 19:59:19 +05:00

chainsaw-leak-guard_test.bats

test(e2e): fail the suite whose pods outlive its cleanup

2026-09-26 15:06:42 +03:00

chainsaw-op-budgets.bats

test(e2e): keep redis-tls failures legible under the op ceiling

2026-10-03 01:42:53 +03:00

changelog-preserve.sh

ci(release): execute the release-changelog logic in tests, not just grep it

2026-07-24 11:34:17 +05:00

check-applicationdefinition-crd-ordering.bats

fix(platform): make *-rd sources depend on cozystack-engine

2026-06-24 22:43:56 +03:00

check-commit-trailers.bats

fix(ci): fail the trailer check on an empty commit range

2026-09-21 12:20:22 +03:00

check-commit-trailers.sh

fix(ci): fail the trailer check on an empty commit range

2026-09-21 12:20:22 +03:00

check-gpu-operator-variants.bats

test(hack): clean up bats temp dirs without EXIT traps

2026-08-05 16:03:57 +03:00

check-gpu-recording-rules.bats

test(hack): clean up bats temp dirs without EXIT traps

2026-08-05 16:03:57 +03:00

check-hook-request-timeout.bats

fix(bucket): stop the ACME cleanup hook from talking to localhost, and gate the class

2026-09-17 09:32:07 +03:00

check-host-runtime.bats

test(hack): clean up bats temp dirs without EXIT traps

2026-08-05 16:03:57 +03:00

check-host-runtime.sh

fix(hack): wrap du in 'timeout 5s' to prevent preflight stall

2026-04-11 17:07:35 +03:00

check-kafka-rd-schema.bats

test(kafka): assert scalar boolean tls.enabled type in rd-schema check

2026-05-27 16:21:46 +03:00

check-kafka-rd-secrets.bats

test(kafka): add cluster-ca-cert checks to kafka-rd secrets bats test

2026-05-27 11:16:41 +03:00

check-kubeovn-image-copies.bats

test(kube-ovn): compare image copies against upstream's Dockerfile

2026-09-22 17:10:05 +03:00

check-kubeovn-image-copies.sh

test(kube-ovn): compare image copies against upstream's Dockerfile

2026-09-22 17:10:05 +03:00

check-mariadb-rd-secrets.bats

fix(mariadb): separate the chart-chosen Secret suffixes with a dot

2026-09-03 20:13:17 +03:00

check-migrations-target.sh

refactor(hack): replace ls|grep with pure-bash glob (shellcheck SC2010)

2026-07-14 13:08:54 +03:00

check-mongodb-rd-secrets.bats

fix(mongodb): declare the trust anchor with a TenantProjection

2026-09-01 11:20:32 +03:00

check-nats-rd-secrets.bats

docs(hack): drop a false universal from the nats-rd secrets check

2026-09-23 00:10:54 +03:00

check-opensearch-rd-secrets.bats

test(opensearch): pin the trust anchor, the name guard and the upgrade

2026-09-11 01:23:22 +03:00

check-opensearch-readme.bats

feat(opensearch)!: issue the HTTP API certificate from cert-manager

2026-09-11 01:23:13 +03:00

check-optional-repos.sh

Rename cozypkg to cozyhr

2025-12-25 16:54:22 +01:00

check-packages-artifact-ignores.bats

fix(test): pass over the flux defaults check instead of aborting the suite

2026-09-21 19:20:48 +03:00

check-postgres-preload-allowlist.bats

feat(postgres): allow preloading an allowlist of shipped modules

2026-09-29 17:02:44 +02:00

check-qdrant-rd-secrets.bats

test(qdrant): pin the tenant-visible Secret surface on both layers

2026-08-09 21:44:07 +03:00

check-rabbitmq-rd-secrets.bats

test(rabbitmq): check the values a pipeline cannot report a status for

2026-09-07 02:55:04 +03:00

check-rabbitmq-topology-kinds.bats

docs(rabbitmq): scope the runbook check and close the narrower-variant question

2026-09-07 03:13:15 +03:00

check-rd-presets_test.bats

fix(tests): reject unreadable RD preset schemas

2026-09-28 14:29:17 +05:00

check-rd-presets.sh

fix(tests): reject unreadable RD preset schemas

2026-09-28 14:29:17 +05:00

check-rd-release-prefix.bats

test(hack): let one selector opt out of the release-prefix guard

2026-09-14 18:08:55 +02:00

check-redis-rd-secrets.bats

feat(redis): move the tenant trust anchor onto the platform projection

2026-09-02 17:58:06 +03:00

check-render-matrix.bats

test(tests): cover empty render inputs and fixture rejection paths

2026-09-25 11:03:47 +05:00

check-render-matrix.sh

test(tests): exercise OIDC and certificate fixture branches

2026-09-25 09:46:43 +05:00

check-talosconfigtemplate-name-agreement.bats

fix(kubernetes): assemble the node group once in kubernetes-nodes

2026-09-30 08:59:03 +02:00

check-values-schema-string-defaults.bats

test(values): reject a boolean default on a string-typed schema property

2026-09-02 17:58:05 +03:00

check-worker-image-catalog-defaults.bats

feat(kubernetes): boot tenant worker disks from a shared golden Talos image

2026-09-23 15:35:44 +03:00

ci-tool-installs-contract.bats

ci(workflows): pin flux, yq and helm-unittest installs

2026-10-02 11:02:18 +03:00

cilium-leak-healer_test.bats

fix(e2e): skip cilium-agent restart for the reserved:ingress IP variant

2026-06-30 19:40:47 +03:00

clickhouse-update-versions_test.bats

fix(clickhouse): fetch tags via skopeo and fail closed on a missing pin

2026-08-26 00:15:22 +03:00

cni-plugins-staging-contract.bats

feat(build): build published images for amd64 and arm64 by default

2026-09-26 15:14:12 +03:00

codeowners-invariant.bats

chore(codeowners): rebuild ownership by area, five owners minimum

2026-09-07 13:20:15 +05:00

collect-images_test.bats

ci(release): fail an rc on any single-arch image its e2e pulled

2026-09-28 01:32:37 +03:00

collect-images.sh

ci(release): fail an rc on any single-arch image its e2e pulled

2026-09-28 01:32:37 +03:00

common-envs_test.bats

fix(build): honour PUSH and LOAD from the environment and in image-talos (#4654)

2026-10-05 14:15:37 +03:00

common-envs.mk

fix(build): honour PUSH and LOAD from the environment and in image-talos (#4654)

2026-10-05 14:15:37 +03:00

console-nginx-header-buffers.bats

fix(dashboard): raise the console nginx header buffers for large OIDC tokens

2026-09-22 21:43:23 +03:00

container-lane-capacity_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

cozyreport-summary.sh

fix(e2e): collect logs for unready pods and record truncated captures

2026-08-05 17:37:04 +03:00

cozyreport-talos.bats

fix(e2e): bound every remaining read in the report collector

2026-08-07 14:38:29 +03:00

cozyreport.bats

test(bats): widen the comments describing the errexit exemption

2026-10-02 15:09:20 +03:00

cozyreport.sh

fix(e2e): collect the CDI controller log and CDI pods in cozyreport

2026-09-23 19:11:28 +03:00

cozystack-controller-secret-rbac.bats

test(cozystack-controller): guard the Secret grant by effective permission

2026-08-12 18:37:09 +03:00

cozystack-version-stamp.bats

test(platform): enforce go-forward version stamps route through the helper

2026-06-24 15:32:52 +03:00

cozytest-capture-gate.bats

test(monitoring): remove orphaned OIDC BATS suites

2026-09-24 16:28:00 +05:00

cozytest-nonascii-title.bats

fix(hack): parse non-ASCII @test titles under BSD awk

2026-09-18 17:45:10 +03:00

cozytest-trace-switch.bats

test(tests): keep trace switch suite ASCII-only

2026-08-28 15:31:22 +05:00

cozytest.sh

fix(e2e): give the cozytest caller a dataplane budget that fits its backstop

2026-10-02 03:29:13 +03:00

dcgm-default-counters.csv

fix(gpu-operator): pin upstream behavior changes; correct DLS licensing example

2026-04-30 14:52:56 +03:00

download-dashboards.sh

Add monitoring for NATs

2026-02-17 22:54:12 +01:00

downstream-trigger-map.bats

docs(agents): add downstream repository checklist to the PR template

2026-07-14 17:07:47 +03:00

e2e-capture-dataplane.sh

fix(e2e): report a dataplane pod read once and by name in its block

2026-10-02 03:29:15 +03:00

e2e-capture-previous-logs.sh

fix(e2e): preserve previous-log cap slots

2026-08-28 15:29:29 +05:00

e2e-chainsaw-run.sh

test(e2e): fail the suite whose pods outlive its cleanup

2026-09-26 15:06:42 +03:00

e2e-cilium-endpoint-leak-healer.sh

fix(e2e): stop the sandbox cluster CIDR overlapping the pod range

2026-08-11 02:31:27 +03:00

e2e-cilium-leak-healer.yaml

fix(e2e): skip cilium-agent restart for the reserved:ingress IP variant

2026-06-30 19:40:47 +03:00

e2e-compose.yaml

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

e2e-container-up.sh

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

e2e-install-cozystack-hosted.bats

test(e2e): fail the isp-hosted no-Cilium check on any cilium.io CRD

2026-10-03 01:42:38 +03:00

e2e-install-cozystack.bats

test(e2e): tell a missing object from a failed read

2026-10-02 15:09:20 +03:00

e2e-isp-hosted-kind.yaml

test(e2e): add an install suite for the isp-hosted variant on kind

2026-10-03 01:42:38 +03:00

e2e-isp-hosted-package.yaml

test(e2e): add an install suite for the isp-hosted variant on kind

2026-10-03 01:42:38 +03:00

e2e-platform-packages.sh

fix(e2e): stop a failed teardown posting a failed test verdict

2026-09-07 16:33:27 +05:00

e2e-post-install-prep.sh

fix(e2e): say when a post-install-prep wait attempt hit its bound

2026-10-01 02:19:17 +03:00

e2e-prepare-cluster-container.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

e2e-prepare-cluster.bats

test(e2e): load drbd_transport_tcp explicitly on Talos nodes

2026-09-30 04:23:39 +03:00

e2e-prepull-images.sh

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

e2e-runner-identity.sh

test(e2e): record the runner's SVM feature flags in the identity capture

2026-08-23 19:38:49 +05:00

e2e-talos-image-cache.yaml

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

e2e-test-openapi.bats

test(hack): let each bats file declare the EXIT traps it still holds

2026-08-07 23:53:40 +03:00

e2e-wait-helmreleases.sh

test(e2e): make the HelmRelease readiness gate hold its own ceiling

2026-09-05 14:51:06 +05:00

etcd-probe_test.bats

test(etcd): stop losing the metrics probe's output to the attach race

2026-07-19 20:16:01 +03:00

fork-pr-checkout_test.bats

fix(ci): let the fork e2e lane check out the pull request again

2026-09-26 20:37:41 +03:00

gate-concurrency-contract.bats

fix(ci): put every label guard in lockstep, forks included

2026-08-14 18:37:57 +05:00

go-mod-download.sh

ci(workflows): cache Go modules and fall back to direct in Go jobs

2026-10-01 19:37:00 +03:00

go-module-fetch-contract.bats

build(monitoring): build the traces collector with a rate limiter

2026-10-06 09:39:04 +03:00

helm-unit-tests.bats

fix(hack): fail when a chart runs no Helm unit test suites

2026-08-12 18:45:22 +03:00

helm-unit-tests.sh

fix(hack): fail when a chart runs no Helm unit test suites

2026-08-12 18:45:22 +03:00

helmrelease-readiness.bats

test(e2e): pin the stability-window reset and keep the fan-out test portable

2026-09-07 16:33:27 +05:00

image-builders-cross-compile.bats

test(build): count build-*.sh scripts as compiling in the cross-compile check

2026-10-01 02:09:49 +03:00

image-pin-consistency.bats

feat(backups): add RabbitMQ definitions backup via a dedicated strategy driver

2026-09-01 18:21:10 +04:00

image-targets-pass-buildx-args.bats

feat(talos): build the installer and matchbox for arm64

2026-09-26 17:44:19 +03:00

installer-image-packages-push_test.bats

fix(installer): skip the packages artifact push and stamp with PUSH=0

2026-10-01 22:15:50 +03:00

isp-hosted-lane_test.bats

test(e2e): fail the isp-hosted no-Cilium check on any cilium.io CRD

2026-10-03 01:42:38 +03:00

issue-triage-contract.bats

feat(ci): auto-apply triage labels to issues

2026-08-12 16:35:36 +03:00

kafka-backup-script.bats

test(backups): pin the restore-side Kafka --describe literal-topic guard

2026-09-14 17:55:48 +04:00

kafka-metadata-backup-demo-helpers.bats

fix(backups): run the kafka-metadata demo CLI Pod as restricted

2026-10-03 01:43:02 +03:00

kafka-migration-hook.bats

fix(kafka): fail closed when the migration hook cannot list Kafka CRs

2026-09-17 11:09:10 +03:00

kafka-pre-delete-hook.bats

fix(kafka): delete the release's node pools on uninstall

2026-09-26 07:35:28 +03:00

kafka-suite-pvc-cleanup_test.bats

test(e2e): read the kafka round-trip cleanup order without yq if/else

2026-10-02 02:49:36 +03:00

kafka-topic-backup-demo-helpers.bats

fix(backups): exec into a CLI Pod in the kafka topic-data demo

2026-10-01 02:21:01 +03:00

kafka-topic-backup-strategy.bats

test(kafka): pin the strategy script's guards with a hermetic bats suite

2026-09-23 18:00:15 +04:00

kamaji-crds-schema.bats

fix(kamaji): anchor the ignore patterns to the chart root

2026-09-24 14:59:01 +03:00

kubectl-wait-retry_test.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

kubernetes-md0-migration.bats

test(platform): cover migration 47 fail-closed contract

2026-06-30 12:08:18 +05:00

kubernetes-nodes-unpin-hook.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

kubernetes-pre-delete-hook.bats

fix(apps/kubernetes): report the pre-delete cleanup outcome honestly

2026-08-07 06:49:56 +03:00

linstor-storage-mode_test.bats

fix(e2e): compare LINSTOR pool datasets, not free bytes, at cleanup

2026-10-02 02:17:00 +03:00

mariadb-first-boot-waits.bats

test(e2e): hold the postgres and bucket walkthrough waits to the floor

2026-10-01 17:40:22 +03:00

md-no-hardwrap.bats

feat(agents): add md-no-hardwrap hook enforcing the prose rule

2026-07-14 14:37:52 +03:00

migrate-to-version-1.0.sh

Fixed packages name conversion in migration script

2026-03-03 19:10:39 +05:00

migration-50-etcd-adopt.bats

fix(platform): keep the legacy etcd-operator stopped after etcd adoption (#4738)

2026-10-05 17:53:30 +03:00

migration-54-redis-adopt.bats

test(migrations): cover migration 54 redis adopt (label+pin, CRD probe fail-closed)

2026-08-19 10:15:59 +02:00

migration-55-fluxcd-orphan.bats

feat(platform): orphan tenant FluxCD HelmReleases on upgrade

2026-08-20 13:37:09 +03:00

migration-56-adopt-path.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

migration-56-adopt-values.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

migration-57-seaweedfs-size-limit.bats

fix(seaweedfs): raise the number of buckets a volume server can serve

2026-09-17 00:54:48 +03:00

migration-58-http-cache-freeze.bats

fix(platform): freeze HTTPCache on the artifact the cluster runs

2026-09-18 13:12:56 +03:00

migration-seaweedfs-db-adopt.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

monitoring-pvc-backfill-migration.bats

test(monitoring): reproduce the real vmselect cache PVC name in the backfill test

2026-07-08 22:27:42 +03:00

multiarch-allowlist

ci(release): publish matchbox as an amd64 and arm64 index

2026-09-29 11:29:04 +03:00

multus-install-cni-plugins.bats

test(tests): preserve Bats failure reports during fixture cleanup

2026-09-29 12:38:02 +05:00

nats-backup-demo-helpers.bats

fix(backups): stop the nats and kafka-metadata demos using a Pod they refused

2026-10-01 02:21:01 +03:00

nightly-mirror_test.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

nightly-mirror.sh

Merge remote-tracking branch 'origin/main' into ci/build-arm64-leg

2026-09-29 11:20:27 +03:00

overlay-main-images_test.bats

test(tests): preserve Bats failure reports during fixture cleanup

2026-09-29 12:38:02 +05:00

overlay-main-images.sh

fix(ci): teach the overlay to repair an unstamped images/*.tag ref (#4362)

2026-09-22 18:53:28 +05:00

package-mk-phony.bats

test(hack): cover the .PHONY declarations this tree relies on

2026-08-14 01:25:34 +03:00

package-test-target-coverage.bats

test(tests): wire the gpu-operator suite into the unit sweep

2026-09-07 04:17:50 +03:00

package-update-templates.bats

fix(cdi): stop make update from overwriting the first-party CDI object

2026-09-23 00:08:41 +03:00

package.mk

fix(hack): declare the shared package targets phony

2026-08-12 18:42:58 +03:00

parse-rc-tag.sh

ci(release): dispatch changelog generation at rc time

2026-07-24 18:16:16 +05:00

platform-packages_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

pod-label-census_test.bats

fix(e2e): select catch pod logs by the nested release instance label

2026-08-05 16:46:50 +03:00

post-install-prep.bats

fix(e2e): say when a post-install-prep wait attempt hit its bound

2026-10-01 02:19:17 +03:00

postgres-backup-app-login_test.bats

test(backups): log in as an application user after each restore

2026-09-24 18:11:07 +03:00

pr-labeler-contract.bats

fix(ci): map the recurring unmapped scopes and add area/dx

2026-10-01 22:37:22 +03:00

pre-checks.sh

Fix osx grep have no -P flag (#438)

2024-10-21 11:59:56 +02:00

pre-commit-generate-packages_test.bats

ci(pre-commit): detect schema drift across all packages

2026-09-27 16:58:28 +03:00

pre-commit-generate-packages.sh

ci(pre-commit): detect schema drift across all packages

2026-09-27 16:58:28 +03:00

promote-gate-contract.bats

docs(hack): fix a wrong claim about grep-error propagation in two contract tests

2026-08-10 12:08:02 +03:00

promote-packages-artifact_test.bats

fix(release): preflight the rc tree's own pin before publishing

2026-08-14 18:37:58 +05:00

promote-packages-artifact.sh

fix(release): preflight the rc tree's own pin before publishing

2026-08-14 18:37:58 +05:00

promote-packages-contract.bats

ci(workflows): pin flux, yq and helm-unittest installs

2026-10-02 11:02:18 +03:00

promote-retag_test.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

promote-retag.sh

fix(ingress-nginx): pull the protobuf-exporter from the project namespace

2026-08-12 18:16:18 +02:00

promote-rewrite-tags_test.bats

fix(release): collect refs stored as registry/image/tag/digest keys

2026-10-02 05:40:47 +03:00

promote-rewrite-tags.sh

fix(hack): correct the nightly-mirror dry-run diagnostic and BSD-sed comments

2026-09-18 17:45:21 +03:00

promotion-retention-contract.bats

fix(release): stop a failed org package listing from exiting green

2026-08-14 18:37:59 +05:00

proxmox-e2e-fixture_test.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

proxmox-step1b-pod-match_test.bats

fix(kubernetes): release Proxmox volumes before the driver that frees them goes

2026-09-29 21:04:05 +02:00

redis-backup-demo-helpers.bats

fix(backups): read the redis demo's keys through exec, not kubectl run

2026-09-23 05:32:36 +03:00

redis-backup-strategy.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

release-changelog-behaviour.bats

test(tests): preserve Bats failure reports during fixture cleanup

2026-09-29 12:38:02 +05:00

release-changelog-contract.bats

test(bats): spell absences so they can fail

2026-10-02 15:01:49 +03:00

release-freeze-contract.bats

test(ci): extend the backport label contract to both spellings

2026-08-27 13:08:16 +05:00

remediation-guard.bats

fix(e2e): fail on a failed release of cilium and csi as on the parent

2026-10-03 06:59:31 +03:00

route-hostname-policy-version-coverage.bats

test(cozystack-basics): pin which policy each route binding names

2026-09-03 22:17:29 +03:00

run-kubernetes-block-io_test.bats

test(e2e): capture worker block IO and volume state on node-join failure

2026-08-17 14:22:09 +03:00

run-kubernetes-cpu-throttle_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

run-kubernetes-drain_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

run-kubernetes-install-wait_test.bats

test(kubernetes): add the Proxmox e2e suite, parked disabled

2026-09-29 21:04:06 +02:00

run-kubernetes-join-timing_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

run-kubernetes-kvm-exits_test.bats

test(e2e): measure the sandbox kernel KVM exit counters across the node-join wait

2026-08-17 14:18:21 +03:00

run-kubernetes-network-counters_test.bats

test(e2e): measure tenant worker CPU as a rate, and the sandbox nodes under it

2026-08-15 10:19:19 +03:00

run-kubernetes-node-join_test.bats

fix(e2e): fail on a failed release of cilium and csi as on the parent

2026-10-03 06:59:31 +03:00

run-kubernetes-oidc_test.bats

test(e2e): assert the System-mode OIDC uid claim mapping

2026-09-22 23:04:28 +03:00

run-kubernetes-remediation_test.bats

fix(e2e): fail on a failed release of cilium and csi as on the parent

2026-10-03 06:59:31 +03:00

run-kubernetes-runner-canary_test.bats

fix(e2e): fail on a failed release of cilium and csi as on the parent

2026-10-03 06:59:31 +03:00

run-kubernetes-runner-cpu_test.bats

test(e2e): stop blocking merges on the tenant node-join deadline

2026-08-21 12:52:42 +03:00

run-kubernetes-sandbox-cpu-time_test.bats

test(e2e): measure tenant worker CPU as a rate, and the sandbox nodes under it

2026-08-15 10:19:19 +03:00

run-kubernetes-schedulable_test.bats

fix(e2e): bound the tenant failure diagnostics per read and as a phase

2026-08-09 02:51:06 +03:00

run-kubernetes-serial-console_test.bats

fix(e2e): fail on a failed release of cilium and csi as on the parent

2026-10-03 06:59:31 +03:00

run-kubernetes-talos-diagnostics_test.bats

fix(e2e): hold replicated-lane LINSTOR cleanup to a pre-suite baseline

2026-10-01 15:27:18 +03:00

run-kubernetes-talos-spec_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

run-kubernetes-thread-cpu_test.bats

test(e2e): split the tenant worker CPU time across QEMU threads

2026-08-16 05:17:16 +03:00

run-migrations.bats

fix(platform): resume a retried migration Job from the stamped version

2026-10-02 21:54:46 +03:00

runner-identity.bats

test(e2e): record the runner's SVM feature flags in the identity capture

2026-08-23 19:38:49 +05:00

sandbox-cidr-disjoint.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

sandbox-runner-headroom.bats

ci(e2e): run the isp-hosted install daily against the nightly

2026-10-03 01:42:38 +03:00

seaweedfs-chart-seam.bats

test(seaweedfs): render the app chart's release values through the data-plane chart

2026-10-02 07:22:42 +03:00

seaweedfs-guard-parity.bats

test(seaweedfs): read the naming guard's logic, not the prose about it

2026-10-02 15:01:49 +03:00

seaweedfs-naming-audit.bats

test(seaweedfs): make the BSD-date shim honor the audit's real format string

2026-09-18 17:42:45 +03:00

seaweedfs-naming-audit.sh

fix(seaweedfs): parse naming-audit timestamps portably across GNU and BSD date

2026-09-18 17:42:45 +03:00

select-changelog-source.sh

ci(release): dispatch changelog generation at rc time

2026-07-24 18:16:16 +05:00

select-e2e_test.bats

test(e2e): spell the find negation as -not in the suite-list helper

2026-10-05 17:57:05 +03:00

select-e2e.sh

test(e2e): cover monitoring OIDC modes with a Chainsaw suite (#4678)

2026-10-05 14:07:10 +03:00

select-install_test.bats

fix(ci): skip directories named like Chainsaw step files

2026-10-01 21:07:05 +03:00

select-install.sh

fix(ci): skip directories named like Chainsaw step files

2026-10-01 21:07:05 +03:00

stitch-multiarch_test.bats

ci(workflows): pin flux, yq and helm-unittest installs

2026-10-02 11:02:18 +03:00

stitch-multiarch.sh

fix(build): log only the tags a build actually pushes

2026-10-02 11:02:36 +03:00

talos-image-cache_test.bats

test(e2e): run the merge-gating lanes on Talos containers

2026-09-05 13:19:17 +05:00

talos-installer-index_test.bats

feat(talos): build the installer and matchbox for arm64

2026-09-26 17:44:19 +03:00

talos-reconcile-heredoc_test.bats

fix(kubernetes-nodes): replace the TalosConfigTemplate CABPT's webhook will not let us patch

2026-09-29 21:09:09 +02:00

tenant-pre-delete-hook.bats

fix(tenant): bound the pre-delete cleanup waits and the hook Job

2026-08-07 14:38:06 +03:00

tracing-central-credentials.bats

fix(monitoring): give a central tenant's Grafana a login that cannot write

2026-10-06 09:39:04 +03:00

unit-test-parallelism.bats

build(make): keep running bats unit files after one fails

2026-10-01 02:09:49 +03:00

update-codegen.sh

chore(deps): move the Kubernetes libraries to v0.37.1

2026-09-26 16:08:25 +03:00

update-crd.sh

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

upload-assets.sh

feat(release): publish the arm64 Talos assets

2026-09-26 17:53:13 +03:00

upload-releasenotes.sh

Add AI-agent for changelogs generation

2025-11-26 20:18:43 +01:00

validate-changelog.sh

ci(release): fix second-round review findings

2026-07-24 11:34:17 +05:00

verify-multiarch_test.bats

ci: build main for arm64 nightly and report its single-arch refs

2026-09-28 01:32:36 +03:00

verify-multiarch.sh

feat(build): gate a release on every pinned image being multi-arch

2026-09-28 01:32:36 +03:00

verify-promoted-packages_test.bats

test(release): cover the split-map and repository-less ref shapes

2026-08-19 12:55:50 +05:00

verify-promoted-packages.sh

ci(workflows): pin flux, yq and helm-unittest installs

2026-10-02 11:02:18 +03:00