Oliver Bähler 730151cb44 feat: add dynamic capsule user evaluation (#1811) ...

* chore: improve dev targets

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* feat(controller): implement deterministic rolebinding reflection

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* feat(controller): capsule users are determined from configuration status

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* feat(tenantowners): added agreggate option - tenantowners are always considered capsule users

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* feat(tenantowner): add implicit aggregation for tenants

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: remove helm flags

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* fix(config): remove usergroups default

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

---------

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

2025-12-31 11:37:30 +01:00

..

additional_role_bindings_test.go

feat: add dynamic capsule user evaluation (#1811)

2025-12-31 11:37:30 +01:00

administrators_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

allowed_external_ips_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

container_registry_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

custom_capsule_group_test.go

feat(config): add combined users property as successor for usergroups (#1767)

2025-12-04 12:18:07 +01:00

custom_resource_quota_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

device_class_test.go

fix(controller): make device and gateway class optional (#1775)

2025-12-09 07:54:30 +01:00

disable_externalname_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

disable_ingress_wildcard_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

disable_loadbalancer_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

disable_node_ports_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

dynamic_tenant_owner_clusterroles_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

enable_loadbalancer_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

enable_node_ports_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

forbidden_annotations_regex_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

force_tenant_prefix_tenant_scope_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

force_tenant_prefix_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

gateway_class_test.go

fix(controller): make device and gateway class optional (#1775)

2025-12-09 07:54:30 +01:00

globaltenantresource_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

imagepullpolicy_multiple_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

imagepullpolicy_single_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_class_extensions_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_class_networking_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_hostnames_collision_cluster_scope_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_hostnames_collision_disabled_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_hostnames_collision_namespace_scope_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_hostnames_collision_tenant_scope_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

ingress_hostnames_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

missing_tenant_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_additional_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_capsule_label_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_hijacking_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_metadata_controller_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_metadata_webhook_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

namespace_status_test.go

fix(controller): decode old object for delete requests (#1787)

2025-12-10 18:34:42 +01:00

namespace_user_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

new_namespace_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

node_user_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

overquota_namespace_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

owner_webhooks_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

owners_test.go

feat: add dynamic capsule user evaluation (#1811)

2025-12-31 11:37:30 +01:00

pod_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

pod_priority_class_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

pod_runtime_class_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

preventing_pv_cross_tenant_mount_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

protected_namespace_regex_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

resource_quota_exceeded_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

resourcepool_test.go

fix(e2e): resourcepool condition (#1773)

2025-12-08 09:37:19 +01:00

resourcepoolclaim_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

sa_owner_promotion_test.go

fix(controller): decode old object for delete requests (#1787)

2025-12-10 18:34:42 +01:00

sa_prevent_privilege_escalation_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

scalability_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

selecting_non_owned_tenant_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

selecting_tenant_fail_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

selecting_tenant_with_label_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

service_forbidden_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

service_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

storage_class_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

suite_client_test.go

chore(e2e): remove build instructions (#1428)

2025-05-01 11:46:05 +02:00

suite_test.go

feat: add dynamic capsule user evaluation (#1811)

2025-12-31 11:37:30 +01:00

tenant_cordoning_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenant_metadata_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenant_name_webhook_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenant_protected_webhook_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenant_resources_changes_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenant_resources_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

tenantresource_test.go

feat(tenant): add dedicated tenantowner crd (#1764)

2025-12-02 15:21:46 +01:00

utils_test.go

feat: add dynamic capsule user evaluation (#1811)

2025-12-31 11:37:30 +01:00