Oliver Bähler
a6b830b1af
feat: add ruleset api( #1844 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* sec(ghsa-2ww6-hf35-mfjm): intercept namespace subresource
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2026-01-27 14:28:48 +01:00
Oliver Bähler
730151cb44
feat: add dynamic capsule user evaluation ( #1811 )
...
* chore: improve dev targets
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): implement deterministic rolebinding reflection
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): capsule users are determined from configuration status
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowners): added agreggate option - tenantowners are always considered capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowner): add implicit aggregation for tenants
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove helm flags
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-31 11:37:30 +01:00
Oliver Bähler
c06f54a3a3
fix(controller): decode old object for delete requests ( #1787 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-10 18:34:42 +01:00
Oliver Bähler
581a8fe60e
feat(controller): administration persona ( #1739 )
...
* chore(refactor): project and api refactoring
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore(refactor): project and api refactoring
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-11-18 16:27:16 +01:00
Oliver Bähler
9fa1abac65
feat(controller): allow owners to promote serviceaccounts within tenant as owners ( #1626 )
...
* feat(controller): allow owners to promote serviceaccounts within tenant as owners
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove harpoon
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-09-11 23:12:45 +02:00
Oliver Bähler
d15ef08576
chore(e2e): remove build instructions ( #1428 )
...
* chore(e2e): add parallel execution and remove build instructions
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: change test targets
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-05-01 11:46:05 +02:00
Oliver Bähler
9ebbbed785
feat(helm): introduce new installation and CRD lifecycle ( #1065 )
...
* chore: name change for webhook names
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove apidocs
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(helm): implement crd lifecycle and values consistency
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: change default group name
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2024-06-12 19:36:01 +02:00
Oliver Bähler
dab022509a
fix(deps): use new pointer func ( #982 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2024-02-15 18:57:28 +01:00
Dario Tranchitella
c735c3c8c9
test: throttling k8sclient
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-11-20 14:50:18 +01:00
Dario Tranchitella
c13e45281e
test: using pointer for test env existing cluster
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-11-20 14:50:18 +01:00
Dario Tranchitella
0830b3629e
chore(header): moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
d7a48d771f
refactor: moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
a950380988
chore(ginkgo): updating to ginkgo v2
2023-05-25 14:36:48 +02:00
Dario Tranchitella
5457df7e96
refactor(deps): updating to controller-runtime 0.15.0
2023-05-25 14:36:48 +02:00
Dario Tranchitella
791dde5bf6
refactor(e2e): switching to v1beta2 as storage version
2022-12-27 17:53:17 +01:00
Dario Tranchitella
9f1165ea40
test: globaltenantresource and tenantresource support
2022-12-26 14:27:26 +01:00
Dario Tranchitella
a3495cf614
chore: go 1.18 support
2022-04-14 15:21:49 +00:00
Pietro Terrizzi
bbb7b850d6
fix: avoid CRD reinstall
2021-09-30 21:16:04 +02:00
Maksim Fedotov
db8b8ac1d9
test(e2e): support multiple tenant owners(add applications to act as tenant owners)
2021-07-12 11:27:13 +02:00
Maksim Fedotov
44bf846260
test(e2e): update tests to use v1beta1 version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
7c1592e739
chore(license): switching over SPDX license header ( #280 )
2021-06-03 19:46:20 +02:00
Dario Tranchitella
61034947fd
test(e2e): modifying CapsuleConfiguration at runtime
2021-05-31 16:15:44 +02:00
Dario Tranchitella
a7f7c00558
Supporting ingresses.networking.k8s.io/v1 ( #110 )
...
* Updating to controller-runtime v0.7.0-alpha.4 and k8s 0.19.3
* Implementing ingresses.networking.k8s.io/v1
* Aligning to latest zap signatures
2020-10-23 21:19:14 +02:00
Dario Tranchitella
9d0a7a78c1
Making CR/CRB names conforming to Kubernetes naming requirements ( #91 )
2020-09-12 12:14:52 +02:00
Maxim Fedotov
303fc4d69c
Support Groups as Subject Kind for Tenant Namespace RoleBindings created by Capsule ( #71 )
...
Modified CRD to support Owner struct.
Added Tenant name validation webhook.
Rewrote owner_reference hook logic.
Updated and added new e2e tests.
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-10 17:02:22 +02:00
Maxim Fedotov
164431959c
Add capsule-user-group CLI flag ( #67 )
...
* add capsule-user-group param
* Implementing RBAC controller
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2020-09-01 12:15:48 +02:00
Dario Tranchitella
9969864141
Scaffolding e2e testing ( #56 )
...
* Implementing generic e2e features
* Adding changes upon e2e benchmarking
2020-08-21 14:55:48 +02:00