Oliver Bähler and GitHub
bdcdcefe63
feat: add globalresourcequota api ( #2068 )
...
* feat: add globalresourcequota api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-08-10 21:25:10 +02:00
Oliver Bähler and GitHub
2252c530f4
feat(performance): removed duplicate client calls from all admission paths ( #2054 )
...
* chore
* perfromance improvements
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* perfromance improvements
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(performance): removed duplicate client calls from all admission paths
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-07-28 14:32:42 +02:00
Oliver Bähler and GitHub
e8ac32d364
feat: add administrator capabilities ( #2049 )
...
* feat: implement performance optimizations
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add administrator capabilities
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add administrator capabilities
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore
* feat: add administrator capabilities
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-07-23 00:09:23 +02:00
Oliver Bähler and GitHub
f1b760a87a
feat(rules): improve metadata enforcement and add ingress rules ( #2050 )
...
* feat: implement namespace metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ingress enforcment
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-07-22 22:24:54 +02:00
Oliver Bähler and GitHub
c17e4fa812
feat: add leader-election tuning ( #2008 )
...
* feat: add leader-election tuning
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add leader-election tuning
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add tracing for admission
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add tracing for admission
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* add tenant
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-07-08 11:44:43 +02:00
6a762e7899
feat: security measures and prometheusrules ( #1995 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: security measures and prometheusrules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-03 08:21:09 +02:00
77d1810bb9
feat: add metadata enforcement ( #1990 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-02 13:42:08 +02:00
Marc Brugger and GitHub
0c22ce882a
feat: define interface for event recorder ( #1985 )
...
Signed-off-by: bakito <github@bakito.ch >
2026-06-30 11:48:18 +02:00
Oliver Bähler and GitHub
755cef54bf
feat(rules): add service enforcement rules ( #1982 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-24 11:20:23 +02:00
Oliver Bähler and GitHub
0b11582e4a
feat: add scheduler enforcement rule ( #1971 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: abstract ruling
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-19 14:34:16 +02:00
Oliver Bähler and GitHub
af2f37793e
fix: add serviceaccount validation for tenantowners and tenants ( #1966 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add serviceaccount validation for tenantowners and tenants
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add serviceaccount validation for tenantowners and tenants
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: correct sa check
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-17 06:32:02 +02:00
Oliver Bähler and GitHub
34262c5536
fix: improve rules api ( #1961 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-10 00:18:40 +02:00
Marc Brugger and GitHub
f4af5c8043
chore: move controller main to cmd/controller ( #1962 )
...
Signed-off-by: bakito <github@bakito.ch >
2026-06-09 23:33:18 +02:00