Aleksei Sviridkin f03d2a510f docs(securitygroup): correct empty-list semantics — an empty list does not deny ...

The Ingress/Egress field docs claimed "an empty list denies all ingress/egress",
which is a false security guarantee. A SecurityGroup projects onto a
CiliumNetworkPolicy that only ADDS allow rules, and Cilium policies are additive
over the tenant's blanket-allow baseline, so an empty list does not isolate a
pod — effective connectivity stays open. Deny / default-deny enforcement depends
on the default-deny baseline, which is separate future work.

Rewrite the API field docs to the accurate semantics, regenerate the OpenAPI so
the served schema description matches, and fix the one DESIGN.md sentence that
still asserted "denies all traffic" (it already contradicted its own safety
section, which correctly states the API cannot deny anything today).

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-29 15:40:23 +03:00

..

applyconfiguration

fix(codegen): add gen_client to update-codegen.sh and regenerate applyconfiguration

2026-02-16 23:01:38 +03:00

clientset/versioned

fix(codegen): add gen_client to update-codegen.sh and regenerate applyconfiguration

2026-02-16 23:01:38 +03:00

listers/apps/v1alpha1

Move project from aenix-io to cozystack repository

2025-03-10 21:16:58 +01:00

openapi

docs(securitygroup): correct empty-list semantics — an empty list does not deny

2026-06-29 15:40:23 +03:00