77d1810bb9
feat: add metadata enforcement ( #1990 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add metadata enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* fix: add resourcepoolclaim validation
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-02 13:42:08 +02:00
Oliver Bähler and GitHub
8d89d6865d
fix(sec): corrects validation for regex objects (hostname and forbidden ( #1983 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): corrects validation for regex objects (hostname and forbidden metadata)
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-24 11:33:34 +02:00
Oliver Bähler and GitHub
755cef54bf
feat(rules): add service enforcement rules ( #1982 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(rules): add service enforcement rules
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-24 11:20:23 +02:00
Oliver Bähler and GitHub
0b11582e4a
feat: add scheduler enforcement rule ( #1971 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: abstract ruling
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
* feat: migrate events api
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-19 14:34:16 +02:00
Oliver Bähler and GitHub
af2f37793e
fix: add serviceaccount validation for tenantowners and tenants ( #1966 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add serviceaccount validation for tenantowners and tenants
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: add serviceaccount validation for tenantowners and tenants
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: correct sa check
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(sec): add namespace termination interception
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-17 06:32:02 +02:00
Omar Ferro and GitHub
f84f9d6c28
fix(webhook): Release annotation on bounded ResourcePoolClaim ( #1965 )
...
Signed-off-by: Omar Ferro <omar.ferroomar@gmail.com >
2026-06-12 14:55:22 +02:00
Oliver Bähler and GitHub
34262c5536
fix: improve rules api ( #1961 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: improve rules api
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-10 00:18:40 +02:00
Marc Brugger and GitHub
f4af5c8043
chore: move controller main to cmd/controller ( #1962 )
...
Signed-off-by: bakito <github@bakito.ch >
2026-06-09 23:33:18 +02:00
+83
327296a5b0
feat: add action type for rules and regexp cache ( #1957 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update codecov/codecov-action action to v5.5.2 (#1783 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 43a17d6 (#1781 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module k8s.io/dynamic-resource-allocation to v0.34.3 (#1786 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module k8s.io/apiextensions-apiserver to v0.34.3 (#1785 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(controller): allow no spaces in template references (#1789 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(controller): allow no spaces in template references
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(controller): allow no spaces in template references
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update securego/gosec action to v2.22.11 (#1788 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1791 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update k8s.io/utils digest to 61b37f7 (#1801 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(controller): template concurrency (#1802 )
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1795 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 (#1796 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update kubernetes packages to v0.35.0 (#1797 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module k8s.io/dynamic-resource-allocation to v0.35.0 (#1798 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency kubernetes-sigs/controller-tools to v0.20.0 (#1799 )
* chore(deps): update dependency kubernetes-sigs/controller-tools to v0.20.0
* chore(deps): update dependency kubernetes-sigs/controller-tools to v0.20.0
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update k8s.io/utils digest to 98d557b (#1803 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1793 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.3 (#1776 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to f67ec12 (#1790 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency google/ko to v0.18.1 (#1792 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module github.com/onsi/gomega to v1.38.3 (#1777 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module sigs.k8s.io/cluster-api to v1.12.1 (#1784 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update k8s.io/utils digest to 383b50a (#1804 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/stale digest to a21a081 (#1808 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: adjust makefile and releaser for kubernetes 1.35 (#1809 )
* chore: adjust makefile and releaser for kubernetes 1.35
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore: adjust makefile and releaser for kubernetes 1.35
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1807 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update k8s.io/utils digest to 718f0e5 (#1806 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to a930d0a (#1805 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update helm release kube-prometheus-stack to v80.8.2 (#1810 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add dynamic capsule user evaluation (#1811 )
* chore: improve dev targets
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): implement deterministic rolebinding reflection
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): capsule users are determined from configuration status
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowners): added agreggate option - tenantowners are always considered capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowner): add implicit aggregation for tenants
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove helm flags
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update helm release kube-prometheus-stack to v80.9.2 (#1812 )
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1814 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update amannn/action-semantic-pull-request digest to 71b07ef (#1815 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to fd448f7 (#1816 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: use cert-manager certificates by default (#1818 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(helm): use cert-manager certificates by default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: move dependencies to trackable resources
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update helm release kube-prometheus-stack to v80.13.2 (#1817 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency prometheus-operator/prometheus-operator to v0.87.1 (#1820 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency golangci/golangci-lint to v2.8.0 (#1823 )
* chore(deps): update dependency golangci/golangci-lint to v2.8.0
* chore(deps): update dependency golangci/golangci-lint to v2.8.0
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore(deps): update dependency golangci/golangci-lint to v2.8.0
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore(deps): update dependency golangci/golangci-lint to v2.8.0
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update helm release kube-prometheus-stack to v80.13.3 (#1827 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module github.com/onsi/gomega to v1.39.0 (#1826 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency prometheus-operator/prometheus-operator to v0.88.0 (#1828 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.4 (#1825 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 0b82b0b (#1824 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update k8s.io/utils digest to 914a6e7 (#1822 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1830 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/stale digest to d6f8a33 (#1843 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update amannn/action-semantic-pull-request digest to b439535 (#1835 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/checkout action to v6.0.2 (#1845 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1847 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1848 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add ruleset api(#1844 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* sec(ghsa-2ww6-hf35-mfjm): intercept namespace subresource
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency alessandrojcm/commitlint-pre-commit-hook to v9.24.0 (#1833 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to deef08a (#1836 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency adrienverge/yamllint to v1.38.0 (#1832 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to b2ff80d (#1821 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to f985be5 (#1850 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 5620efe (#1852 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1851 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1837 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1856 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to 8aac4e4 (#1855 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: diverse performance improvements (#1861 )
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/stale digest to dcd2b94 (#1857 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(docs): update home in chart.yaml (#1864 )
* fix(docs): update home in chart.yaml
Signed-off-by: sandert-k8s <sandert98@gmail.com >
* fix: linter
Signed-off-by: sandert-k8s <sandert98@gmail.com >
---------
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/stale digest to b5d41d4 (#1866 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5 (#1865 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update amannn/action-semantic-pull-request digest to ac7e3fc (#1871 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 6d473d3 (#1860 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 17ae174 (#1876 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update github/codeql-action digest to 0ec47d0 (#1858 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to 57aae52 (#1882 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update actions/stale digest to db5d06a (#1886 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to a0a6512 (#1887 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to e22c389 (#1888 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update anchore/sbom-action digest to f0d33c1 (#1893 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(workflows): bump trivy action to 0.35.0 (#1896 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(webhook): adapt to controller-runtime breaking change in newwebhookmanagedby (#1898 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add e2e openshift support (#1894 )
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1873 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1859 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency alessandrojcm/commitlint-pre-commit-hook to v9.25.0 (#1907 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): set renovate minimum release age to 14 days (#1908 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: add lfx status badges (#1909 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* ci: pin slsa provenance workflow (#1903 )
Signed-off-by: Akash Kumar <meakash7902@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency b1nary-gr0up/nwa to v0.7.8 (#1906 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1900 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: upstream enterprise preview (#1841 )
feat: upstream enterprise preview
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: CorentinPtrl <pitrel.corentin@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: bump supported version (#1918 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: bump makefile 1.35
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: release workflows (#1919 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: bump makefile 1.35
* fix: release workflows
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: reuse webhookport from values (#1927 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: reuse webhookport from values
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: consider webhooks.service.port
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: consider webhooks.service.port
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: correct helm values schema for webservcie ports (#1928 )
Signed-off-by: bakito <github@bakito.ch >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: correct helm docs for webhook service port schema (#1929 )
Signed-off-by: bakito <github@bakito.ch >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update capsule-proxy docker tag to v0.12.0 (#1846 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency prometheus-operator/prometheus-operator to v0.91.0 (#1849 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update dependency grafana/grafana-operator to v5.22.2 (#1819 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: use release age for all managers except helm (#1931 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: use release age for all managers except helm
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update capsule-proxy docker tag to v0.13.1 (#1932 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add observedgeneration to status object of all crds (#1930 )
* feat: add observedgeneration to status object of all crds
Signed-off-by: sandert-k8s <sandert98@gmail.com >
* chore(api): rename rulestatusspec to rulestatusstatus
Signed-off-by: sandert-k8s <sandert98@gmail.com >
---------
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: promote sander tervoert as maintainer (#1933 )
* chore: promote sander tervoert as maintainer
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore: promote sander tervoert as maintainer
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore: promote sander tervoert as maintainer
Signed-off-by: Hristo Hristov <me@hhristov.info >
* chore: promote sander tervoert as maintainer
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: promote sander tervoert as maintainer (#1939 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* ci: add goreleaser dry run (#1936 )
Signed-off-by: Alan <alan747271363-art@users.noreply.github.com >
Co-authored-by: Alan <alan747271363-art@users.noreply.github.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module gomodules.xyz/jsonpatch/v2 to v3 (#1917 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update helm release kube-prometheus-stack to v85 (#1914 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module go.uber.org/zap to v1.28.0 (#1904 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: avoid rejection when users are classified as administrators (#1941 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: avoid rejection when users are classified as administrators
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update capsule-proxy docker tag to v0.13.2 (#1942 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module sigs.k8s.io/gateway-api to v1.5.1 (#1878 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: typo in ruleset description crd (#1944 )
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add tenant list to status of capsuleconfiguration (#1935 )
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: correct tls reconciler and add tenantowners (#1946 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: tls controller
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add tenantowner tenant status reference
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: refactor logger usage
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: fix typo (#1945 )
* chore: typo in ruleset description crd
Signed-off-by: sandert-k8s <sandert98@gmail.com >
* chore: fix typo
Signed-off-by: sandert-k8s <sandert98@gmail.com >
---------
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: allow managed metadata defined per tenant (#1947 )
* fix: allow managed metadata defined per tenant
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: allow managed metadata defined per tenant
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: action type
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: preserve ca-bundles injected from external providers (#1948 )
* fix: preserve ca-bundles injected from external providers (#1948 )
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix(deps): update module sigs.k8s.io/cluster-api to v1.13.2 (#1874 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(deps): bump golang 1.26.4 (#1949 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat(deps): bump golang 1.26.4
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* feat(deps): bump golang 1.26.4
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update capsule-proxy docker tag to v0.13.3 (#1950 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore(deps): update all-ci-updates (#1902 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: best effort patch reconciling status (#1952 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: best effort patch reconciling status
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: use different match strategy for truthy and match (#1953 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: best effort patch reconciling status
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: use different match strategy for truthy and match
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* progress
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add registry
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add registry
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: update all gihub actions, use digest versioning and remove obsolete docs-lint workflow (#1955 )
Signed-off-by: bakito <github@bakito.ch >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: translate serviceaccounts to type serviceaccount not user (#1956 )
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: preserve ca-bundles injected from external providers
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: translate serviceaccounts to type serviceaccount not user
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add improved registry enforcement
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Signed-off-by: Hristo Hristov <me@hhristov.info >
Signed-off-by: sandert-k8s <sandert98@gmail.com >
Signed-off-by: Akash Kumar <meakash7902@gmail.com >
Signed-off-by: bakito <github@bakito.ch >
Signed-off-by: Alan <alan747271363-art@users.noreply.github.com >
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: Sander Tervoert <32864332+sandert-k8s@users.noreply.github.com >
Co-authored-by: Akash Kumar <91385321+AkashKumar7902@users.noreply.github.com >
Co-authored-by: CorentinPtrl <pitrel.corentin@gmail.com >
Co-authored-by: Marc Brugger <github@bakito.ch >
Co-authored-by: alan747271363-art <alan747271363@gmail.com >
Co-authored-by: Alan <alan747271363-art@users.noreply.github.com >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-08 23:20:49 +02:00
Oliver Bähler and GitHub
a6927c5777
fix: allow managed metadata defined per tenant ( #1947 )
...
* fix: allow managed metadata defined per tenant
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: allow managed metadata defined per tenant
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-03 17:29:18 +02:00
3d1158ed23
fix: correct tls reconciler and add tenantowners ( #1946 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: tls controller
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* feat: add tenantowner tenant status reference
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* chore: refactor logger usage
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
* fix: tlsreconciler only patches cabundles
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-03 16:02:17 +02:00
Sander Tervoert and GitHub
f62b7748ae
feat: add tenant list to status of capsuleconfiguration ( #1935 )
...
Signed-off-by: sandert-k8s <sandert98@gmail.com >
2026-06-03 14:48:28 +02:00
Oliver Bähler and GitHub
b783d03f44
fix: avoid rejection when users are classified as administrators ( #1941 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix: avoid rejection when users are classified as administrators
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
2026-06-02 14:17:27 +02:00
Sander Tervoert and GitHub
d255c33f5d
feat: add observedgeneration to status object of all crds ( #1930 )
...
* feat: add observedgeneration to status object of all crds
Signed-off-by: sandert-k8s <sandert98@gmail.com >
* chore(api): rename rulestatusspec to rulestatusstatus
Signed-off-by: sandert-k8s <sandert98@gmail.com >
---------
Signed-off-by: sandert-k8s <sandert98@gmail.com >
2026-06-01 06:51:46 +02:00
cc4fb45d70
feat: upstream enterprise preview ( #1841 )
...
feat: upstream enterprise preview
---------
Signed-off-by: Oliver Baehler <oliver@sudo-i.net >
Co-authored-by: CorentinPtrl <pitrel.corentin@gmail.com >
2026-05-28 00:58:58 +02:00
Hristo Hristov and GitHub
07449240e5
feat: add e2e openshift support ( #1894 )
...
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat: add e2e openshift support
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
2026-04-15 11:27:39 +03:00
Oliver Bähler and GitHub
0abc77b56a
feat: diverse performance improvements ( #1861 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2026-02-03 22:05:00 +01:00
Oliver Bähler and GitHub
a6b830b1af
feat: add ruleset api( #1844 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* sec(ghsa-2ww6-hf35-mfjm): intercept namespace subresource
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: conflicts
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(api): add rulestatus api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2026-01-27 14:28:48 +01:00
Oliver Bähler and GitHub
730151cb44
feat: add dynamic capsule user evaluation ( #1811 )
...
* chore: improve dev targets
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): implement deterministic rolebinding reflection
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): capsule users are determined from configuration status
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowners): added agreggate option - tenantowners are always considered capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenantowner): add implicit aggregation for tenants
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove helm flags
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(config): remove usergroups default
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-31 11:37:30 +01:00
Oliver Bähler and GitHub
c06f54a3a3
fix(controller): decode old object for delete requests ( #1787 )
...
* fix(controller): decode old object for delete requests
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: modernize golang
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-10 18:34:42 +01:00
Oliver Bähler and GitHub
936a152d39
fix(controller): make device and gateway class optional ( #1775 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-09 07:54:30 +01:00
Corentin Pitrel and GitHub
711cef90c8
fix(e2e): resourcepool condition ( #1773 )
...
Signed-off-by: CorentinPtrl <pitrel.corentin@gmail.com >
2025-12-08 09:37:19 +01:00
Oliver Bähler and GitHub
584d372521
feat(config): add combined users property as successor for usergroups ( #1767 )
...
* feat(config): add combined users property as successor for usergroups and usernames configuration
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* fix(crds): add proper deprecation notices on properties and via admission warnings
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: add local monitoring environment
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-04 12:18:07 +01:00
Hristo Hristov and GitHub
dd39e1a6d5
feat(dra): support dra device classes ( #1759 )
...
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(dra): support dra device classes
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
2025-12-04 09:57:45 +02:00
Oliver Bähler and GitHub
d812a0c722
feat(tenant): add dedicated tenantowner crd ( #1764 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-12-02 15:21:46 +01:00
Oliver Bähler and GitHub
5899e6d9a1
feat(tenant): add available classes as status fields ( #1751 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-11-21 10:31:45 +01:00
Oliver Bähler and GitHub
7e7d9d02c6
feat(config): administrators get delete privileges for tenant namespaces ( #1749 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-11-20 18:33:08 +01:00
Oliver Bähler and GitHub
581a8fe60e
feat(controller): administration persona ( #1739 )
...
* chore(refactor): project and api refactoring
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore(refactor): project and api refactoring
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-11-18 16:27:16 +01:00
Oliver Bähler and GitHub
5ac0f83c5a
feat(controller): refactor namespace core loop and state management ( #1680 )
...
* feat(controller): allow owners to promote serviceaccounts within tenant as owners
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): refactor status handling for tenants and owned namespaces (including metrics)
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-10-06 08:19:26 +02:00
Hristo Hristov and GitHub
4878e1ab1f
fix: bypass resourepool limits ( #1669 )
...
* fix: bypass resourepool limits
Signed-off-by: Hristo Hristov <me@hhristov.info >
* fix: bypass resourepool limits
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
2025-09-29 09:39:44 +02:00
Oliver Bähler and GitHub
9fa1abac65
feat(controller): allow owners to promote serviceaccounts within tenant as owners ( #1626 )
...
* feat(controller): allow owners to promote serviceaccounts within tenant as owners
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove harpoon
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-09-11 23:12:45 +02:00
Hristo Hristov and GitHub
15a09e4831
feat(tenant): add templating support for additionalmetadatalist ( #1613 )
...
* feat(tenant): add templating support for additionalmetadatalist
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): add e2e tests
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): add e2e tests
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): add e2e tests
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
2025-08-25 20:52:32 +02:00
Oliver Bähler and GitHub
cb029a1d70
feat(config): add usernames property identify specific users as capsule users ( #1606 )
...
* feat(config): add usernames property identify specific users as capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(helm): improve admission configurations
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(helm): improve admission configurations
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add usernames property identify specific users as capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add usernames property identify specific users as capsule users
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-08-22 15:03:50 +02:00
Oliver Bähler and GitHub
074eb40734
feat(config): add ignore user groups property ( #1586 )
...
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(config): add ignore user groups property
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-08-15 00:23:33 +02:00
Oliver Bähler and GitHub
e1f47feade
Merge commit from fork
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-08-14 09:03:29 +02:00
Oliver Bähler and GitHub
c7237f802b
feat(api): add resourcepools and claims ( #1333 )
...
* feat: functional appsets
* feat(api): add resourcepools api
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: fix gomod
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: correct webhooks
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: fix harpoon image
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: improve e2e
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: add labels to e2e test
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: fix status handling
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: fix racing conditions
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: make values compatible
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: fix custom resources test
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: correct metrics
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-05-22 09:07:13 +02:00
a60ebfac5e
feat(tenant): support gateway/class ( #1463 )
...
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
* feat(tenant): support gateway/class
Signed-off-by: Hristo Hristov <me@hhristov.info >
---------
Signed-off-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-05-20 19:53:42 +03:00
f85b61860e
feat: namespace metadata sync on creation #1378 ( #1379 )
...
* feat: namespace metadata sync on creation #1378
Signed-off-by: Siarhei Rasiukevich <s_rasiukevich@wargaming.net >
* fix(tenant): internal error is not returned in cordon webhook
Signed-off-by: Siarhei Rasiukevich <s_rasiukevich@wargaming.net >
* fix(utils): lint on pkg/utils/namespace_selector.go
Signed-off-by: Siarhei Rasiukevich <s_rasiukevich@wargaming.net >
---------
Signed-off-by: Siarhei Rasiukevich <s_rasiukevich@wargaming.net >
Co-authored-by: Siarhei Rasiukevich <s_rasiukevich@wargaming.net >
2025-05-09 06:39:12 +02:00
Deofex and GitHub
8e9b8adac9
feat: Add additionalMetadataList Support for Conditional Metadata Assignment ( #1339 )
...
* feat: Add support for additionalMetadataList
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
* docs: change description
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
* fix: missing bracket
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
* fix: removed duplicated if statement
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
* chore: adjustments after review
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
* chore: Sync `syncNamespaceMetadata` method
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
---------
Signed-off-by: Deofex <28751252+Deofex@users.noreply.github.com >
Signed-off-by: Deofex 28751252+Deofex@users.noreply.github.com
2025-05-08 08:45:05 +02:00
9d1f70229b
feat(tenant): improve cordoning selection ( #1424 )
...
feat(tenant): improve cordoning selection (#1424 )
Signed-off-by: Hristo Hristov <me@hhristov.info >
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-05-05 23:04:52 +03:00
Oliver Bähler and GitHub
d15ef08576
chore(e2e): remove build instructions ( #1428 )
...
* chore(e2e): add parallel execution and remove build instructions
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: change test targets
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-05-01 11:46:05 +02:00
Oliver Bähler and GitHub
d93279bceb
chore: bump kubernetes 1.33 ( #1423 )
...
* feat(deps): bump supported kubernetes version to 1.33
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(controller): support discoveryv1 endpointslices only
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(deps): bump ginkgo
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2025-04-30 17:19:01 +02:00
Hristo Hristov and GitHub
5a32195091
fix(ci): switch to large runner for e2e tests ( #1429 )
...
fix(ci): switch to large runner for e2e tests
Signed-off-by: Hristo Hristov <me@hhristov.info >
2025-04-30 13:21:43 +02:00
Samir Tahir and GitHub
da66f40462
feat(api): Add forceTenantPrefix option to Tenant spec ( #1244 )
...
Signed-off-by: samir-tahir <samirtahir91@gmail.com >
2024-12-04 06:45:05 +01:00
Dario Tranchitella and GitHub
a49c57bb5b
feat: runtimeclass default support ( #1165 )
...
* fix(makefile): no need specifying ginkgo version
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
* fix(chore): referring to make using shortcut
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
* feat: default runtimeclass webhook
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
* feat(helm): default runtimeclass spec
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
---------
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2024-08-20 10:50:26 +02:00
Oliver Bähler and GitHub
d620b0457d
Merge commit from fork
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2024-08-20 10:19:14 +02:00
eb7a77a920
chore: fix some comments ( #1146 )
...
Signed-off-by: beforetech <mail@before.tech >
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2024-08-01 17:46:06 +02:00
Oliver Bähler and GitHub
9ebbbed785
feat(helm): introduce new installation and CRD lifecycle ( #1065 )
...
* chore: name change for webhook names
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: remove apidocs
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* feat(helm): implement crd lifecycle and values consistency
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
* chore: change default group name
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
---------
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2024-06-12 19:36:01 +02:00
guangwu and GitHub
df80539a3c
fix(test): feature test name typo
...
Signed-off-by: guoguangwu <guoguangwug@gmail.com >
2024-05-23 14:43:39 +02:00
Oliver Bähler and GitHub
e418f74e34
fix(controller): ensure iteration on capsule ownerreferences ( #1059 )
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2024-05-02 11:55:51 +02:00
