Volodymyr Stoiko 91181532cd chart: add tap.networkPolicies.enabled, off by default ...

The Hub's network-policy routes create and remove Kubernetes NetworkPolicy
objects and compute pod-reachability impact. That acts outside Kubeshark's own
data, so it is not something a role should carry implicitly and not something
a deployment should offer unasked. It gets the same shape as scripting: a
switch the operator sets, rendering NETWORK_POLICIES_DISABLED for the Hub.

Off by default. The dashboard never calls these routes, so nothing in the UI
changes; a caller that wants them is asking on purpose.

2026-08-27 14:55:19 +03:00

..

_helpers.tpl

🔒 decide API gating from tap.auth.enabled alone

2026-08-17 06:56:45 +00:00

01-service-account.yaml

Fix bugs in helm chart (#1765)

2025-06-18 08:45:17 -07:00

02-cluster-role.yaml

helm: grant hub tokenreviews and label worker pods for internal auth (#1926)

2026-05-13 10:53:20 -07:00

03-cluster-role-binding.yaml

Fix bugs in helm chart (#1765)

2025-06-18 08:45:17 -07:00

04-hub-deployment.yaml

Provide external volume for dissection job (#1905)

2026-04-10 09:51:44 -07:00

05-hub-service.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

06-front-deployment.yaml

chart: drop demoModeEnabled in favour of auth.defaultRole

2026-08-27 12:33:32 +03:00

07-front-service.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

08-persistent-volume-claim.yaml

Fix bugs in helm chart (#1765)

2025-06-18 08:45:17 -07:00

09-snapshots-pvc.yaml

Add snapshots cloud storage (#1852)

2026-03-04 08:50:45 -08:00

09-worker-daemon-set.yaml

🔒 decide API gating from tap.auth.enabled alone

2026-08-17 06:56:45 +00:00

10-ingress.yaml

🔨 Add tap.ingress.path helm value (#1782)

2025-08-26 13:01:55 -07:00

11-nginx-config-map.yaml

🔨 Set nginx proxy-buffer directives (#1909)

2026-04-18 08:07:47 +03:00

12-config-map.yaml

chart: add tap.networkPolicies.enabled, off by default

2026-08-27 14:55:19 +03:00

13-secret.yaml

Authz refactoring (helm chart + CLI) (#1921)

2026-05-06 09:08:21 -07:00

14-openshift-security-context-constraints.yaml

Update 14-openshift-security-context-constraints.yaml (#1539)

2024-05-05 10:45:25 -07:00

15-worker-service-metrics.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

16-hub-service-metrics.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

17-network-policies.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

18-cleanup-job.yaml

Add priority class configuration for Kubeshark components (#1775)

2025-07-28 12:18:45 -07:00

18-dex-deployment.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

19-dex-service.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

20-dex-secret.yaml

Migrate kubehq.com to kubeshark.com domain (#1824)

2026-01-21 19:23:50 -08:00

21-cloud-storage.yaml

Add gcs cloudstorage configuration docs (#1862)

2026-03-09 07:48:17 -07:00

22-cli-auth.yaml

cli + helm: gated-Hub authentication (License-Key → ServiceAccount-token, phases 1+2a) + MCP token lifecycle (#1944)

2026-07-14 15:04:37 -07:00

NOTES.txt

🔒 apply tap.auth.defaultRole when authentication is disabled

2026-08-17 07:38:14 +00:00