Myasnikov Daniil fc5dc66c61 fix(networking): isolate webhook policies from namespace churn ...

Move pod denials to source-side Cilium policies so namespace churn
cannot regenerate fail-closed webhook endpoints. Keep the external
world deny as a static target rule.

Assisted-By: GPT-5 <noreply@openai.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-09-02 19:15:44 +05:00

..

apps

feat(mongodb): add TLS support via PSMDB operator-managed certificates (#2692)

2026-09-01 14:16:24 +04:00

core

feat(kubernetes)!: manage worker pools as KubernetesNodes, adopt on upgrade (Phase 2, breaking) (#3315)

2026-08-26 12:06:18 +04:00

extra

docs(etcd): note that affinity is not applied to existing members

2026-09-01 12:47:46 +03:00

library

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00

system

fix(networking): isolate webhook policies from namespace churn

2026-09-02 19:15:44 +05:00

tests/cozy-lib-tests

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00