open-cluster-management

mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-08-20 20:56:52 +00:00

Author	SHA1	Message	Date
Jian ZhuandGitHub	4f173e7ba7	🐛 fix: Propagate UserInfo.Extra field in ManifestWork webhook SAR (#1427 ) This commit fixes a security vulnerability where the ManifestWork validating webhook was not passing the UserInfo.Extra field when constructing SubjectAccessReview (SAR) requests. This omission could lead to authorization bypass when external authorization policies rely on Extra fields (e.g., OIDC claims, department attributes). The fix adds Extra field conversion logic consistent with the ManagedCluster webhook implementation and includes comprehensive test coverage to verify the Extra field is properly propagated. Fixes #1425 🤖 Assisted by Claude Code Signed-off-by: zhujian <jiazhu@redhat.com>	2026-03-12 07:26:16 +00:00
Jian QiuandGitHub	4a46af2145	Bump kubernetes lib to 1.35 (#1414 ) Signed-off-by: Jian Qiu <jqiu@redhat.com>	2026-03-08 11:01:58 +00:00
Jian Zhu GitHub Claude	1125e4c33d	🌱 Remove resolved TODO comments (#1177 ) Scorecard supply-chain security / Scorecard analysis (push) Failing after 50s Post / coverage (push) Failing after 55s Post / images (amd64, addon-manager) (push) Failing after 36s Post / images (amd64, placement) (push) Failing after 40s Post / images (amd64, registration) (push) Failing after 28s Post / images (amd64, registration-operator) (push) Failing after 20s Post / images (amd64, work) (push) Failing after 29s Post / images (arm64, addon-manager) (push) Failing after 33s Post / images (arm64, placement) (push) Failing after 32s Post / images (arm64, registration) (push) Failing after 25s Post / images (arm64, registration-operator) (push) Failing after 33s Post / images (arm64, work) (push) Failing after 29s Post / image manifest (addon-manager) (push) Has been skipped Post / image manifest (placement) (push) Has been skipped Post / image manifest (registration) (push) Has been skipped Post / image manifest (registration-operator) (push) Has been skipped Post / image manifest (work) (push) Has been skipped Post / trigger clusteradm e2e (push) Has been skipped * 🧹 Remove resolved TODO comments - Remove TODO comment about confirming subject in CustomSignerConfigurations - Remove TODO comment about namespace value in manifestwork validating webhook 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: zhujian <jiazhu@redhat.com> * Ensure addon namespace and image pull secret sync - Remove outdated TODO comment about addon deployment in Hosted mode - Namespace creation is responsibility of addon developers - Image pull secrets are synced to namespaces with addon.open-cluster-management.io/namespace label by the AddonPullImageSecretController 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: zhujian <jiazhu@redhat.com> --------- Signed-off-by: zhujian <jiazhu@redhat.com> Co-authored-by: Claude <noreply@anthropic.com>	2025-09-15 02:20:53 +00:00
Jian QiuandGitHub	88f6f4dd17	Refactor code to start managers with shared informers (#232 ) Signed-off-by: Jian Qiu <jqiu@redhat.com>	2023-08-21 00:03:58 -02:30
Jian QiuandGitHub	e810520961	🌱 Refactor code to fix lint warning (#218 ) * Refactor code to fix lint warning Signed-off-by: Jian Qiu <jqiu@redhat.com> * enable lint for testing files Signed-off-by: Jian Qiu <jqiu@redhat.com> --------- Signed-off-by: Jian Qiu <jqiu@redhat.com>	2023-07-25 07:12:34 +02:00
Jian ZhuandGitHub	7332a585c0	🌱 add a verify rule for golang files import order (#177 ) * 🌱 add a verify rule for golang files import order This PR uses the [gci tool](https://github.com/daixiang0/gci) to make all go files' import section with a specific order, it will organize import with group with order： 1. standard library modules 2. 3rd party modules 3. modules in OCM org, like the `open-cluster-management.io/api` 4. current project `open-cluster-management.io/ocm` modules developers can use the `make fmt-imports` to format the import automatically and the `make verify-fmt-imports` to check for any violation. Signed-off-by: zhujian <jiazhu@redhat.com> * 🌱 format the go files import Signed-off-by: zhujian <jiazhu@redhat.com> --------- Signed-off-by: zhujian <jiazhu@redhat.com>	2023-06-12 10:23:04 -04:00
Chunlin YangandGitHub	6f21760b7e	Bump k8s to v0.27.2 (#160 ) upgrade to golang 1.20 Signed-off-by: clyang82 <chuyang@redhat.com>	2023-06-06 05:55:07 -04:00
Jian QiuandGitHub	116ae8cc28	Refactor version/feature/cmd packages (#148 ) Signed-off-by: Jian Qiu <jqiu@redhat.com>	2023-05-30 02:07:32 -04:00
xuezhaojunandGitHub	ad38b9465f	Relocate pkgs. (#146 ) Signed-off-by: xuezhaojun <zxue@redhat.com>	2023-05-29 07:20:55 -04:00