Pulse/internal/models
rcourtman e327e09945 Fix KubernetesCluster RBAC slice race and align SECURITY.md sensor-wrapper guidance
KubernetesCluster RBAC slices were not deep-cloned

cloneKubernetesCluster cloned Nodes, Namespaces, Pods, Deployments,
and 20+ other slices via dedicated helpers but left Roles,
ClusterRoles, RoleBindings, and ClusterRoleBindings aliased to the
source slice through the dest := src shallow copy. The final
dest.NormalizeCollections() call then iterates over those four
slices and writes c.Roles[i] = c.Roles[i].NormalizeCollections()
via index assignment, which races with any concurrent clone (or
read of the same source). The race detector caught it once the
k8s cluster count was bumped from 1 to 3 in 7938f28de, which made
the contention window wide enough to hit under -race. Fix by
deep-cloning the four RBAC slices with append([]T(nil), src...)
following the same pattern as the inline slice copies elsewhere
in cloneKubernetesCluster.

SECURITY.md sensor-wrapper alignment

The SMART/SSH feature shipped in 8769f07ee updated the shipped
public security doc at frontend-modern/public/docs/SECURITY.md to
document the new Pulse-owned /usr/local/sbin/pulse-sensors wrapper
forced-command shape for the legacy SSH temperature collection
flow, but the source SECURITY.md at the repo root still described
the prior command="sensors -j" forced command. The docsLinks
test (which compares the two for byte equality) flagged the drift.
Align root SECURITY.md and re-sync the shipped copy so both
describe the wrapper contract that the setup-script and runtime
collector now own.
2026-05-27 18:13:44 +01:00
..
account_roles.go fix(hosted): enforce tenant org membership during handoff 2026-03-26 23:14:54 +00:00
ceph_pool_storage_test.go Fix Proxmox guest memory fallbacks 2026-05-05 14:59:29 +01:00
concurrency_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
converters.go Expose Docker and Kubernetes API tab fields 2026-05-24 18:47:55 +01:00
converters_additional_test.go Expose Docker and Kubernetes API tab fields 2026-05-24 18:47:55 +01:00
converters_test.go Expand Docker runtime inventory coverage 2026-05-24 10:24:42 +01:00
deepcopy.go Fix KubernetesCluster RBAC slice race and align SECURITY.md sensor-wrapper guidance 2026-05-27 18:13:44 +01:00
deepcopy_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
disk_summary.go Restore linked host-agent disk inventory for guest VMs 2026-04-22 09:22:46 +01:00
disk_summary_test.go Restore linked host-agent disk inventory for guest VMs 2026-04-22 09:22:46 +01:00
metrics_types.go Route physical disk drawer IO through canonical history 2026-04-01 23:33:43 +01:00
metrics_types_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
models.go Add Kubernetes RBAC inventory to the agent + canonical + UI 2026-05-25 09:25:03 +01:00
models_frontend.go Expose Docker and Kubernetes API tab fields 2026-05-24 18:47:55 +01:00
models_frontend_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
models_helpers_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
node_aliases_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
organization.go Fail closed on ambiguous email principal resolution 2026-05-05 09:26:10 +01:00
organization_additional_test.go Fail closed on ambiguous email principal resolution 2026-05-05 09:26:10 +01:00
profile_validation.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
profile_validation_additional_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
profile_validation_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
profiles.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
snapshot_provider.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
state_additional_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
state_docker_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
state_host_test.go Correct PBS job health evidence boundaries 2026-05-13 17:05:03 +01:00
state_snapshot.go Merge linked host disks into guest overviews 2026-04-30 14:37:43 +01:00
state_snapshot_additional_test.go Stabilize RC release backend race proofs 2026-04-11 23:18:44 +01:00
state_snapshot_concurrency_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
state_snapshot_frontend_test.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
state_snapshot_merge_test.go Merge linked host disks into guest overviews 2026-04-30 14:37:43 +01:00