feat: security measures and prometheusrules (#1995)

* fix(controller): decode old object for delete requests

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* fix: preserve ca-bundles injected from external providers

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add metadata enforcement

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add metadata enforcement

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: add resourcepoolclaim validation

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: add resourcepoolclaim validation

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: add resourcepoolclaim validation

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* fix: add resourcepoolclaim validation

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: security measures and prometheusrules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Oliver Bähler
2026-07-03 08:21:09 +02:00
committed by GitHub
co-authored by Copilot Autofix powered by AI
parent 8526d84500
commit 6a762e7899
29 changed files with 1206 additions and 44 deletions
+8 -5
View File
@@ -728,7 +728,7 @@ func main() {
if err = (&tenantownercontroller.TenantOwnerManager{
Log: ctrl.Log.WithName("capsule.ctrl").WithName("tenantowners"),
Client: manager.GetClient(),
}).SetupWithManager(manager, controllerConfig); err != nil {
}).SetupWithManager(manager, controllerConfig, metrics.MustMakeTenantOwnerRecorder()); err != nil {
setupLog.Error(err, "unable to create controller", "controller", "TenantOwners")
os.Exit(1)
}
@@ -759,18 +759,21 @@ func main() {
os.Exit(1)
}
configrecorder := metrics.MustMakeConfigRecorder()
if err = (&configcontroller.Manager{
Rest: manager.GetConfig(),
Client: manager.GetClient(),
Log: ctrl.Log.WithName("capsule.ctrl").WithName("configuration"),
}).SetupWithManager(manager, controllerConfig); err != nil {
}).SetupWithManager(manager, controllerConfig, configrecorder); err != nil {
setupLog.Error(err, "unable to create controller", "controller", "CapsuleConfiguration")
os.Exit(1)
}
if err = (&rulestatuscontroller.Manager{
Client: manager.GetClient(),
Log: ctrl.Log.WithName("capsule.ctrl").WithName("ruleset"),
Client: manager.GetClient(),
Log: ctrl.Log.WithName("capsule.ctrl").WithName("ruleset"),
Metrics: metrics.MustMakeRuleStatusRecorder(),
}).SetupWithManager(manager, controllerConfig); err != nil {
setupLog.Error(err, "unable to create controller", "controller", "RuleSet")
os.Exit(1)
@@ -789,7 +792,7 @@ func main() {
RegexCache: regexCache,
}
if err := localInvalidator.SetupWithManager(manager, controllerConfig); err != nil {
if err := localInvalidator.SetupWithManager(manager, controllerConfig, configrecorder); err != nil {
setupLog.Error(err, "unable to create controller", "controller", "invalidator")
os.Exit(1)
}