3 people 735075f5a6 [Backport release-1.5] Fix: forbid 302 request to avoid SSRF (#5003) ...

* fix helm chart list endpoint SSRF CVE

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit 8883a6219d)

* revert error log

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit e1e6972b17)

* change with const value

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>

fix ci

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit fbeacb0a6b)

Co-authored-by: 楚岳 <wangyike.wyk@alibaba-inc.com>

2022-11-04 20:16:53 +08:00

..

addon

Feat: filter definitions by which addon installed them (#4156)

2022-06-29 10:55:50 +08:00

apply

Feat: ignore control check for resource without resource version (#4557)

2022-08-04 15:30:11 +08:00

common

[Backport release-1.5] Fix: forbid 302 request to avoid SSRF (#5003)

2022-11-04 20:16:53 +08:00

config

Fix: provider can't be added since 1.4 as context abused && Feat: add cache for remote terraform module in vela show (#4256)

2022-06-27 11:31:06 +08:00

env

Fix: it does not check the same name for 'vela env init' (#4798)

2022-09-28 10:59:26 +08:00

errors

Fix: rework parallel execution for ApplyComponents and ResourceKeeper Dispatch (#3407)

2022-03-10 16:43:22 +08:00

filters

Feat: filter definitions by which addon installed them (#4156)

2022-06-29 10:55:50 +08:00

helm

[Backport release-1.5] Fix: forbid 302 request to avoid SSRF (#5003)

2022-11-04 20:16:53 +08:00

parallel

Feat: vela auth list-privileges (#3923)

2022-05-18 20:57:39 +08:00

system

Fix: bind env to system namespace (#3706)

2022-04-19 20:55:59 +08:00

terraform

Fix: add more fields for Terraform types definitions in api schema (#2836)

2021-12-01 10:03:08 +08:00

util

Feat: vela auth gen-kubeconfig (#3911)

2022-05-18 16:14:00 +08:00

file_test.go

Feat: create VelaQL views using vela ql apply (#4324)

2022-07-07 13:59:16 +08:00

file.go

Feat: support vela kube apply for CUE and JSON files (#4420)

2022-07-21 16:02:57 +08:00

json.go

Feat: support standalone style multi-cluster (#3223)

2022-03-07 10:21:00 +08:00

jwt.go

Feat: vela auth grant-privileges (#3943)

2022-05-23 10:47:13 +08:00

k8s_test.go

[Backport 1.5] Fix: gc legacy rt with regularization (#4768)

2022-09-23 16:42:47 +08:00

k8s.go

[Backport 1.5] Fix: gc legacy rt with regularization (#4768)

2022-09-23 16:42:47 +08:00

load_test.go

Feat: generate docs for reference automatically (#4377)

2022-07-18 19:22:55 +08:00

load.go

Fix: ignore save when source is local-path (#4417)

2022-07-21 14:30:49 +08:00

parse_test.go

Feat: add revision command (#3506)

2022-03-28 14:47:47 +08:00

parse.go

Feat(lang): add addons gitlab support (#3543)

2022-04-07 11:05:14 +08:00

pprof.go

[Backport release-1.5] Fix: memory leak of the apiserver (#4777)

2022-09-23 17:14:10 +08:00

random.go

Feat(workflow): Add op.#Task action (#2220)

2021-09-02 13:40:10 +08:00

round_trippers.go

Feat: reconcile app with scoped permissions (#3434)

2022-03-15 11:55:50 +08:00

sanitize_test.go

Fix: security alert (#2945)

2021-12-16 21:03:54 +08:00

sanitize.go

Fix: security alert (#2945)

2021-12-16 21:03:54 +08:00

strings_test.go

Feat: Support basic-auth or reuse chartmuseum as addon registry (#3787)

2022-05-07 23:39:34 +08:00

strings.go

Feat: Support basic-auth or reuse chartmuseum as addon registry (#3787)

2022-05-07 23:39:34 +08:00

suit_test.go

Feat: rework cluster to align velaux and cli (#3299)

2022-02-22 15:48:22 +08:00

url_test.go

Fix: cluster url (#2675)

2021-11-12 11:43:46 +08:00

url.go

Feat: support install and uninstall vela core (#3181)

2022-02-09 11:48:38 +08:00

util_test.go

Feat(workflow): Add op.#Task action (#2220)

2021-09-02 13:40:10 +08:00