Aleksei Sviridkin bb1b2a64f4 feat(kubernetes): tie kubevirt-csi's VMI hotplug fallback to the gate ...

The right value of --enable-vmi-hotplug-fallback is decided by the
KubeVirt CR in packages/system/kubevirt, not by the tenant: it must stay
true while that CR enables HotplugVolumes and turn false in the same
change that drops the gate. A note beside the gate in the CR points at
the controller Deployment, and a helm-unittest pins the flag off the
rendered args.

The chart relies on the driver default instead of rendering =true. The
driver image is stamped only at release preparation, so between
releases the chart on main runs the previous release's binary, which
does not know the flag, and Go's flag package exits on an unknown one:
rendering the default would crash-loop the controller for no effect.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-28 23:25:37 +03:00

..

application-definition-crd

docs(api): separate the healthCheckExprs failure modes

2026-09-23 00:05:35 +03:00

backup-controller

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

backupstrategy-controller

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

bootbox

…

bootbox-rd

…

bucket

fix(tenant): fail fast on an empty tenant apex and correct gateway docs (#4538)

2026-09-28 21:32:36 +03:00

bucket-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

capi-operator

…

capi-providers-bootstrap

fix(kubernetes): address review findings on Talos worker bootstrap

2026-06-23 14:45:53 +05:00

capi-providers-core

fix(capi): ship the core provider manifests the repository actually holds

2026-09-25 16:26:13 +02:00

capi-providers-cpprovider

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

capi-providers-infraprovider

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

capi-providers-infraprovider-proxmox

feat(cluster-api): add Proxmox infrastructure provider package

2026-09-25 16:23:45 +02:00

capi-providers-ipam-in-cluster

feat(cluster-api): add in-cluster IPAM provider package

2026-09-25 16:23:45 +02:00

cert-manager

fix(cert-manager): move the webhook off the kubelet's port

2026-07-20 00:20:06 +03:00

cert-manager-crds

test(cert-manager-crds): pin the keep annotation on the CRDs

2026-08-07 14:36:06 +03:00

cert-manager-issuers

fix(platform): declare the injected _cluster values in system charts

2026-09-07 02:23:47 +03:00

cilium

chore(deps): update container image & action digests

2026-09-24 16:55:04 +03:00

cilium-networkpolicy

test(system): anchor index-addressed negative asserts to what they name

2026-08-12 15:28:37 +03:00

clickhouse-operator

…

clickhouse-rd

feat(clickhouse): add configurable version parameter

2026-08-24 23:41:27 +03:00

cluster-autoscaler

…

clustersecret-operator

…

computeplane-rd

docs(computeplane): nodeGroups allowlist drops unlisted fields, not pass-through

2026-08-25 16:39:19 +03:00

coredns

chore(packages/system/coredns): refresh coredns chart to 1.46.0

2026-06-22 21:46:49 +03:00

cozy-proxy

…

cozystack-api

feat(api): add configurable resources and replicas for cozystack-engine components (#2956)

2026-09-28 20:56:43 +03:00

cozystack-basics

fix(platform): freeze HTTPCache on the artifact the cluster runs

2026-09-18 13:12:56 +03:00

cozystack-controller

feat(api): add configurable resources and replicas for cozystack-engine components (#2956)

2026-09-28 20:56:43 +03:00

cozystack-scheduler

[cozystack-scheduler] Publish SchedulingClass demo (#2252)

2026-07-30 14:20:18 +05:00

dashboard

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

etcd-operator

chore(etcd-operator): bump to v0.5.6

2026-09-23 21:22:43 +04:00

etcd-operator-crds

chore(etcd-operator): bump to v0.5.6

2026-09-23 21:22:43 +04:00

etcd-rd

docs(etcd): note that affinity is not applied to existing members

2026-09-01 12:47:46 +03:00

external-dns

[external-dns] Set resources requests/limits on external-dns container

2026-07-03 19:14:15 +03:00

external-dns-rd

ci(external-dns): regenerate cozyrds schema for gatewayAPI description

2026-05-25 19:11:52 +03:00

external-secrets-operator

fix(external-secrets): move the webhook off the kubelet's port

2026-07-20 04:49:57 +03:00

flux-plunger

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

flux-shard-operator

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

forklift

feat(migration): tenant self-service VM import from VMware vSphere

2026-09-07 17:03:44 +02:00

forklift-operator

feat(migration): tenant self-service VM import from VMware vSphere

2026-09-07 17:03:44 +02:00

foundationdb-operator

fix(foundationdb-operator)!: drop the amd64-only 7.1 init container

2026-09-26 20:30:50 +03:00

foundationdb-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

gateway-api-crds

test(gateway-api-crds): pin the vendored bundle version in the suite

2026-09-03 22:17:04 +03:00

goldpinger

[goldpinger] Set resources requests/limits on goldpinger DaemonSet

2026-07-03 19:14:27 +03:00

gpu-operator

fix(platform): accept the container gpu-operator variant in iaas (#4101)

2026-09-08 02:50:33 +04:00

grafana-operator

chore(deps): update container image & action digests

2026-09-24 16:55:04 +03:00

hami

chore(packages/system/hami): bump HAMi to 2.9.0

2026-06-22 19:09:10 +03:00

harbor

fix(redis): run the multi-arch redis_exporter so the sidecar starts on arm64

2026-09-27 03:04:44 +03:00

harbor-rd

fix(harbor-rd): carry the release prefix in the resource selectors

2026-09-08 22:45:33 +02:00

hetzner-robotlb

…

info-rd

…

ingress-nginx

fix(ingress): run the default backend on arm64

2026-09-26 22:32:06 +03:00

ingress-rd

feat(ingress): add proxyProtocol knob to ingress-nginx

2026-06-09 12:50:35 +03:00

kafka-operator

…

kafka-rd

feat(apps): declare the Kubernetes and Kafka name caps in their charts

2026-09-23 10:59:51 +03:00

kamaji

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

keda

fix(keda): pin job=kube-state-metrics in the ScaleStuck Pending join

2026-09-08 16:35:57 +03:00

keycloak

fix(keycloak): validate the realm list wherever it is set

2026-09-22 10:54:28 +05:00

keycloak-configure

fix(platform): reject non-string realm names and shell-quote the hook realm

2026-09-21 12:15:10 +03:00

keycloak-operator

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

kilo

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

kubeovn

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

kubeovn-plunger

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

kubeovn-webhook

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

kubernetes-nodes-rd

docs(kubernetes): clarify node pool Helm timeout semantics

2026-09-27 17:18:01 +03:00

kubernetes-rd

fix(kubernetes,kubernetes-nodes): validate dnsServers, refuse a substrate switch, drop the Pod threshold on proxmox

2026-09-25 16:46:15 +02:00

kubernetes-worker-image

feat(kubernetes): boot tenant worker disks from a shared golden Talos image

2026-09-23 15:35:44 +03:00

kuberture

test(kuberture): pin shim contract with helm-unittest

2026-05-14 16:49:00 +03:00

kubevirt

feat(kubernetes): tie kubevirt-csi's VMI hotplug fallback to the gate

2026-09-28 23:25:37 +03:00

kubevirt-cdi

fix(cdi): validate kubevirt-cdi values against a schema (#4417)

2026-09-23 20:07:06 +04:00

kubevirt-cdi-operator

fix(kubevirt-cdi-operator): pin the vendored CDI release

2026-09-22 23:45:58 +03:00

kubevirt-csi-node

fix(kubernetes): pin KubeVirt CSI sidecars to SIG Storage releases

2026-08-21 15:51:53 +03:00

kubevirt-instancetypes

fix(kubevirt-instancetypes): restore persistent EFI/TPM state

2026-07-06 09:49:50 +05:00

kubevirt-operator

test(kubevirt): add a unit-test target for the operator package

2026-09-07 01:23:29 +03:00

lineage-controller-webhook

feat(api): add configurable resources and replicas for cozystack-engine components (#2956)

2026-09-28 20:56:43 +03:00

linstor

feat(build): build package images for amd64 and arm64 (#4498)

2026-09-28 19:43:47 +03:00

linstor-gui

fix(keycloak): complete realm-name coverage and guard non-string names

2026-09-21 12:15:10 +03:00

linstor-scheduler

fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook

2026-07-16 16:57:41 +03:00

local-ccm

…

mariadb-operator

fix(mariadb): correct webhook cert-manager override key path

2026-09-28 17:41:20 +05:30

mariadb-rd

feat(mariadb)!: generate every user password, root included

2026-09-24 18:10:57 +03:00

metallb

fix(build): pass the shared buildx flags from every image target

2026-09-26 14:32:44 +03:00

metrics-server

fix(metrics-server): move the listener off the kubelet's port

2026-07-20 05:24:04 +03:00

migration-controller

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

mongodb-operator

chore(packages/system/mongodb-operator): bump psmdb-operator to 1.22.0

2026-06-22 18:55:38 +03:00

mongodb-rd

fix(mongodb): declare the trust anchor with a TenantProjection

2026-09-01 11:20:32 +03:00

monitoring

test(charts): isolate guard coverage for every guarded template

2026-09-28 18:32:49 +03:00

monitoring-agents

fix(monitoring): pin the scrape size rendering and sharpen the alert

2026-09-23 20:56:07 +03:00

monitoring-rd

feat(monitoring): add per-tenant OTLP collector for distributed tracing

2026-09-25 13:35:34 +03:00

multus

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

nats

chore(packages/system/nats): bump nats to 1.3.16

2026-06-22 20:05:54 +03:00

nats-rd

feat(nats): publish ca.crt-only trust anchor to tenants

2026-08-12 18:42:13 +03:00

nfs-driver

chore(packages/system/nfs-driver): bump csi-driver-nfs to 4.13.3

2026-06-22 18:51:06 +03:00

objectstorage-controller

build(go): move the toolchain and builder images to Go 1.27.1

2026-09-24 17:23:18 +03:00

openbao

chore(packages/system/openbao): bump openbao chart to 0.25.7

2026-06-23 03:25:16 +03:00

openbao-rd

chore(apps): regenerate schemas and ApplicationDefinitions with x-cozystack-options

2026-06-02 16:42:58 +03:00

opencost

chore(packages/system/opencost): bump opencost chart to 2.5.23

2026-06-23 14:39:14 +03:00

opensearch-operator

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

opensearch-rd

feat(opensearch)!: issue the HTTP API certificate from cert-manager

2026-09-11 01:23:13 +03:00

ouroboros

test(system): anchor index-addressed negative asserts to what they name

2026-08-12 15:28:37 +03:00

piraeus-operator

…

piraeus-operator-crds

…

postgres-operator

docs(postgres-operator): distinguish chart version from appVersion in comment

2026-08-25 18:52:30 +03:00

postgres-rd

feat(postgres)!: generate user passwords and read them at runtime

2026-09-24 18:10:57 +03:00

prometheus-operator-crds

fix(prometheus-operator-crds): keep the CRDs on uninstall

2026-08-07 14:37:46 +03:00

qdrant

…

qdrant-rd

feat(qdrant): publish ca.crt-only trust anchor to tenants

2026-08-09 21:06:46 +03:00

rabbitmq-operator

…

rabbitmq-rd

fix(rabbitmq): describe the preset as filling what resources leaves unset

2026-09-22 17:47:55 +04:00

redis-operator

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

redis-rd

build(redis-operator): carry TLS support as a downstream patch

2026-09-02 17:58:06 +03:00

reloader

fix(reloader): add startupProbe to survive slow first start under load

2026-07-28 12:16:57 +03:00

seaweedfs

fix(seaweedfs): compare volume sizes as numbers in the resize hook

2026-09-26 14:56:07 +03:00

seaweedfs-db

test: cover flux v2.8 chart fixes and wire missing test targets

2026-05-31 15:02:33 +05:00

seaweedfs-rd

fix(seaweedfs): raise the number of buckets a volume server can serve

2026-09-17 00:54:48 +03:00

securitygroup-controller

fix(build): cross-compile image builders on the build platform

2026-09-26 15:05:06 +03:00

snapshot-controller

…

talos-log-collector

chore(deps): update container image & action digests

2026-09-24 16:55:04 +03:00

tcp-balancer-rd

docs(tcp-balancer): say that whitelistHTTP needs a non-empty whitelist

2026-09-23 11:18:19 +04:00

telepresence

…

tenant-rd

docs(tenant): clarify that gateway=false behaves like unset

2026-09-28 15:52:46 +03:00

valkey-rd

feat(valkey): register Valkey application in the platform

2026-09-01 11:43:10 +04:00

velero

fix(platform): give node DaemonSets memory requests and limits

2026-08-13 16:47:52 +05:00

vertical-pod-autoscaler

fix(http-cache,vpa): fix haproxy 3.3 backend name conflict and vpa-for-vpa OOM (#2654)

2026-07-22 20:57:45 +03:00

vertical-pod-autoscaler-crds

fix(vertical-pod-autoscaler-crds): keep the CRDs on uninstall

2026-08-07 14:37:46 +03:00

victoria-metrics-operator

…

virtualprivatecloud-rd

…

vm-default-images

fix(vm-default-images): refresh stale Alpine and openSUSE 16.0 image URLs

2026-06-25 12:56:49 +05:00

vm-disk-rd

feat(vm-disk): let the operator defer binding to the consumer

2026-09-07 16:27:24 +05:00

vm-instance-rd

docs(virtual-machine): correct persistent EFI migration documentation

2026-09-26 11:40:08 +03:00

vpn-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

vsnap-crd

fix(vsnap-crd): keep the CRDs when the release is uninstalled

2026-08-07 14:37:46 +03:00

.gitattributes

chore(codeowners): don't gate per-app generated files on architect review

2026-08-03 14:08:36 +03:00

Makefile

…