cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-06 20:13:43 +09:00

Files

T

Ivan Okhotnikov 5950450758 feat(apps/kubernetes): add Kubernetes.spec.oidc selector API

Introduce a flat selector — `mode: System | CustomConfig | None` —
plus a `users[]` list and a `customConfig` block for tenant-supplied
AuthenticationConfiguration. Default `None` preserves today's
behavior.

The `System` mode trusts the platform `cozy` realm via a per-cluster
public client; `CustomConfig` accepts an inline `AuthenticationConfiguration`
or a Secret reference (mutually exclusive). The `users[]` list drives
per-user ClusterRoleBindings inside the tenant cluster, with two
roles: `admin` and `view`.

Regenerates deepcopy, JSON schema, README, and the kubernetes-rd
cozyrds embedded schema.

Implements Phase 1 API of the per-tenant OIDC design proposal
(cozystack/community#24).

Signed-off-by: Ivan Okhotnikov <ivan.okhotnikov@aenix.io>

2026-07-06 09:25:07 +03:00

api-rules

refactor(sdn)!: reshape SecurityGroup into a membership-group model

2026-06-25 16:01:40 +03:00

apps/v1alpha1

feat(apps/kubernetes): add Kubernetes.spec.oidc selector API

2026-07-06 09:25:07 +03:00

backups

fix(backups): carry dropdown option sources in CRD annotations, not schema

2026-06-04 12:45:14 +03:00

gateway/v1alpha1

feat(tenantgateway): add existingSecret cert mode for operator wildcard