1717 Commits
Author SHA1 Message Date
Oliver BählerandGitHub 62d8d623ed fix: revert pv labeling to dircet api reads (#2085)
* fix: revert pv labeling to dircet api reads

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: revert pv labeling to dircet api reads

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-17 10:52:24 +02:00
5e9080e7b6 chore(deps): update helm release kube-prometheus-stack to v88 (#2082)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-17 10:51:39 +02:00
fed61d2815 feat: replicating resources upon namespace creation (#2080)
* feat: replicating resources upon namespace creation

This feature enhances the (Global)TenantResource replication by
triggering a replication of resources upon a Namespace creation: this
speeds up the replication of resources without waiting for the
resyncPeriod that could be delayed for several reasons.

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* fix: addressing fix from github copilot

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
Co-authored-by: Oliver Bähler <26610571+oliverbaehler@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-08-17 10:51:09 +02:00
Oliver BählerandGitHub 305cabd4f6 fix: consistently reconcile quotas from rules (#2083)
* fix: do not mutate on update and bound pvcs

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: do not mutate on update and bound pvcs

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: consistently reconcile quotas from rules

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-17 10:49:56 +02:00
Hristo HristovandGitHub bddb97644a fix(helm): fix manager.rbac.strict being no-op (#2084)
Signed-off-by: Hristo Hristov <me@hhristov.info>
2026-08-14 12:27:25 +03:00
bd197b8546 fix(deps): update module google.golang.org/grpc to v1.83.0 (#2078)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-14 11:04:52 +02:00
0429516999 chore(deps): update all-ci-updates (#2075)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-14 11:04:21 +02:00
Dario TranchitellaandGitHub fbda18f6dd fix: missing leader election namespace when running out-of-cluster (#2079)
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
2026-08-14 11:03:38 +02:00
59123cf0ee chore(deps): update dependency anchore/syft to v1.50.0 (#2076)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-12 12:26:01 +02:00
0258839c65 chore(deps): update actions/stale action to v11 (#2074)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-11 14:07:06 +02:00
Oliver BählerandGitHub 93fafdc2fd fix: do not mutate on update and bound pvcs (#2073)
* fix: do not mutate on update and bound pvcs

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: do not mutate on update and bound pvcs

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-11 12:03:16 +02:00
Oliver BählerandGitHub bdcdcefe63 feat: add globalresourcequota api (#2068)
* feat: add globalresourcequota api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-10 21:25:10 +02:00
d92453427c fix(deps): update module sigs.k8s.io/gateway-api to v1.6.1 (#2027)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:30:01 +02:00
4db5224046 chore(deps): update dependency prometheus-operator/prometheus-operator to v0.92.1 (#2031)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:29:37 +02:00
a0154a9a86 fix(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.69.0 (#2010)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:28:59 +02:00
1b633d6d0c fix(deps): update module github.com/go-logr/logr to v1.4.4 (#2065)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:27:32 +02:00
4f0a4c951a fix(deps): update module github.com/google/cel-go to v0.30.0 (#2061)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:27:11 +02:00
7c9b9891c1 fix(deps): update module google.golang.org/grpc to v1.82.1 (#2060)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:26:33 +02:00
f6b0278e21 chore(deps): update helm release kube-prometheus-stack to v87.19.2 (#2071)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 16:24:44 +02:00
06b2f63f07 fix(deps): update module github.com/prometheus/client_golang to v1.24.1 (#2064)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 12:30:26 +02:00
Oliver BählerandGitHub 957288b29e feat: bump supported kubernetes version to 1.36 (#2072)
* feat: bump supported kubernetes version to 1.36

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: bump supported kubernetes version to 1.36

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: bump supported kubernetes version to 1.36

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-10 10:52:11 +02:00
b5aa0764b2 chore(deps): update all-ci-updates (#2020)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 10:27:10 +02:00
5d99d8d5f0 chore(deps): update dependency anchore/syft to v1.49.0 (#2063)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 10:02:10 +02:00
35931417f2 chore(deps): update dependency goreleaser/goreleaser to v2.17.1 (#2070)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-10 08:38:19 +02:00
95e836744a chore(deps): update all-ci-updates (#2066)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-08 09:50:45 +03:00
dca3e2f05e chore(deps): update all-ci-updates (#2062)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-04 06:47:46 +02:00
Oliver BählerandGitHub 06187e5673 sec: use default serviceaccount for tenantresources by default (#2029)
Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-08-04 06:47:24 +02:00
8d111c7923 fix(deps): update module sigs.k8s.io/cluster-api to v1.13.4 (#2056)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-30 10:29:25 +03:00
2d92b96182 chore(deps): update all-ci-updates (#2057)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-29 09:47:40 +03:00
Oliver BählerandGitHub 613b43aa21 fix: correct tenant ownerships resolution with deduplicaiton (#2059)
* chore

* perfromance improvements

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* perfromance improvements

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: correct tenant ownerships resolution with deduplicaiton

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
v0.13.11
2026-07-28 19:30:00 +02:00
Oliver BählerandGitHub 2252c530f4 feat(performance): removed duplicate client calls from all admission paths (#2054)
* chore

* perfromance improvements

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* perfromance improvements

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat(performance): removed duplicate client calls from all admission paths

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-07-28 14:32:42 +02:00
229ed836a3 chore(deps): update all-ci-updates (#2053)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-28 06:10:05 +02:00
8f370530a7 chore(deps): update all-ci-updates (#2051)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-27 10:56:51 +02:00
Oliver BählerandGitHub e8ac32d364 feat: add administrator capabilities (#2049)
* feat: implement performance optimizations

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add administrator capabilities

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add administrator capabilities

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* chore

* feat: add administrator capabilities

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
v0.13.10
2026-07-23 00:09:23 +02:00
84e8dca31e chore(deps): update all-ci-updates (#2039)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-22 23:35:45 +02:00
Oliver BählerandGitHub f1b760a87a feat(rules): improve metadata enforcement and add ingress rules (#2050)
* feat: implement namespace metadata enforcement

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add ingress enforcment

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-07-22 22:24:54 +02:00
8c26b409a1 chore(deps): update actions/checkout digest to 3d3c42e (#2043)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-21 17:00:19 +02:00
Oliver BählerandGitHub 99e05220ab feat: implement performance optimizations (#2045)
* feat: implement performance optimizations

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-07-21 16:27:29 +02:00
Hristo HristovandGitHub 16bc2190ca ci: add fossa project.team name (#2047)
* ci: add fossa project.team name

Signed-off-by: Hristo Hristov <me@hhristov.info>

* ci: add fossa project.team name

Signed-off-by: Hristo Hristov <me@hhristov.info>

* ci: add fossa project.team name

Signed-off-by: Hristo Hristov <me@hhristov.info>

---------

Signed-off-by: Hristo Hristov <me@hhristov.info>
2026-07-21 15:04:31 +03:00
Hristo HristovandGitHub 1fadf5f7b9 ci: add fossa project.team name (#2046)
* ci: add fossa project.team name

Signed-off-by: Hristo Hristov <me@hhristov.info>

* ci: add fossa project.team name

Signed-off-by: Hristo Hristov <me@hhristov.info>

---------

Signed-off-by: Hristo Hristov <me@hhristov.info>
2026-07-21 14:14:01 +03:00
Hristo HristovandGitHub 0378ea279e test(e2e): skip failing specs on openshift (#2034)
Fix the OpenShift e2e bootstrap and skip the specs that still fail on
OpenShift/MicroShift:

- Drop the dev-setup-fluxcd prerequisite from dev-setup-cert-manager so
  the OpenShift path no longer re-applies the non-OpenShift flux
  manifests over the SCC-patched ones (which restored source-controller's
  fsGroup 1337, rejected by every OpenShift SCC and hanging the run).
- Label the remaining OpenShift-failing specs with skip-on-openshift so
  they are excluded by the e2e-openshift label filter.

Signed-off-by: Hristo Hristov <me@hhristov.info>
2026-07-20 14:44:15 +03:00
975d738509 chore(deps): update dependency goreleaser/goreleaser to v2.17.0 (#2040)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 13:04:54 +02:00
1790189d4e chore: revert dry-run admission tests (#2038)
* fix: allow administrator operations on tenant namespaces

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: allow administrator operations on tenant namespaces

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: allow administrator operations on tenant namespaces

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: allow administrator operations on tenant namespaces

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* fix: revert dry-run

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: revert dry-run

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: revert dry-run

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: implement namespace metadata enforcement

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-20 13:03:47 +02:00
Tom StockwellandGitHub abff646dab fix: Enforce namespace metadata validation for capsule users only (#2042)
Signed-off-by: Tom Stockwell <tstockwell@redhat.com>
2026-07-20 11:10:14 +02:00
8e99f7c155 chore(deps): update capsule-proxy docker tag to v0.13.9 (#2030)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-17 09:40:49 +02:00
ef9b95ea75 chore(deps): update all-ci-updates (#2035)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-17 09:40:24 +02:00
Oliver BählerandGitHub 15a848d844 fix: allow administrator operations on tenant namespaces (#2037)
fix: allow administrator operations on tenant namespaces 

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-07-17 09:38:32 +02:00
4829d40e7a chore(deps): update all-ci-updates (#2025)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-15 10:54:41 +02:00
f5bfb72723 fix(deps): update module google.golang.org/grpc to v1.82.0 (#2033)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-15 10:53:47 +02:00
Oliver BählerandGitHub 9ee5468f47 feat: add rolebindings to rules api (#2032)
* feat: add rolebindings to rules api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add rolebindings to rules api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add rolebindings to rules api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add rolebindings to rules api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add rolebindings to rules api

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: implement review

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-07-15 10:35:36 +02:00