vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2168 commits 288 branches 211 tags 26 MiB
Commit graph

2168 commits

This branch
This branch
All branches
Author SHA1 Message Date
cozystack-bot
ff10d684da Prepare release v0.41.8 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-11 11:20:45 +00:00
Andrei Kvapil
dfb280d091
[Backport release-0.41] [dashboard] Add startupProbe to prevent container restarts on slow hardware (#2014) 
# Description
Backport of #1996 to `release-0.41`.
 2026-02-10 12:30:39 +01:00
Andrei Kvapil
32b1bc843a
[Backport release-0.41] [vm] allow switching between instancetype and custom resources (#2013) 
# Description
Backport of #2008 to `release-0.41`.
 2026-02-10 12:30:11 +01:00
Andrei Kvapil
2c87a83949
[Backport release-0.41] feat(kubernetes): auto-enable Gateway API support in cert-manager (#2012) 
# Description
Backport of #1997 to `release-0.41`.
 2026-02-10 12:29:57 +01:00
Andrei Kvapil
a53df5eb90 fix(dashboard): add startupProbe to prevent container restarts on slow hardware 
Kubelet kills bff and web containers on slow hardware because the
livenessProbe only allows 33 seconds for startup. Add startupProbe
with failureThreshold=30 and periodSeconds=2, giving containers up
to 60 seconds to start before livenessProbe kicks in.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
(cherry picked from commit 330cbe70d4)
 2026-02-10 11:22:41 +00:00
Kirill Ilin
b212dc02f3 [vm] add validation for resources 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 13d848efc3)
 2026-02-10 11:20:54 +00:00
Kirill Ilin
ec50052ea4 [vm] allow switching between instancetype and custom resources 
Implemented by upgrade hook atomically patching VM resource

Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit cf2c6bc15f)
 2026-02-10 11:20:54 +00:00
Andrei Kvapil
9b61d1318c feat(kubernetes): auto-enable Gateway API support in cert-manager 
When the Gateway API addon is enabled, automatically configure
cert-manager with enableGatewayAPI: true. Uses the same default
values + mergeOverwrite pattern as Cilium for consistency.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
(cherry picked from commit 90ac6de475)
 2026-02-10 11:20:04 +00:00
Andrei Kvapil
1c3a5f721c
Release v0.41.7 (#1995) 
This PR prepares the release `v0.41.7`.
 2026-02-06 08:56:31 +01:00
cozystack-bot
6274f91c74 Prepare release v0.41.7 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-06 01:40:42 +00:00
Andrei Kvapil
f347b4fd70
[Backport release-0.41] fix(postgres-operator): correct PromQL syntax in CNPGClusterOffline alert (#1989) 
# Description
Backport of #1981 to `release-0.41`.
 2026-02-05 20:34:33 +01:00
mattia-eleuteri
40d51f4f92 fix(postgres-operator): correct PromQL syntax in CNPGClusterOffline alert 
Remove extra closing parenthesis in the CNPGClusterOffline alert expression
that causes vmalert pods to crash with "bad prometheus expr" error.

Signed-off-by: mattia-eleuteri <mattia@hidora.io>
(cherry picked from commit 2cb299e602)
 2026-02-05 19:25:36 +00:00
Andrei Kvapil
38c73ae3bd
[Backport release-0.41] [dashboard] Verify JWT token (#1983) 
# Description
Backport of #1980 to `release-0.41`.
 2026-02-05 09:39:31 +01:00
Timofei Larkin
0496a1b0e8 [dashboard] Verify JWT token 
## What this PR does

When OIDC is disabled, the dashboard's token-proxy now properly
validates bearer tokens against the k8s API's JWKS url.

### Release note

```release-note
[dashboard] Verify bearer tokens against the issuer's JWKS url.
```

Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 23e399bd9a)
 2026-02-04 15:11:15 +00:00
Andrei Kvapil
b49a6d1152
Release v0.41.6 (#1979) 
This PR prepares the release `v0.41.6`.
 2026-02-04 04:02:38 +01:00
cozystack-bot
0dac208d43 Prepare release v0.41.6 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-04 01:41:27 +00:00
Andrei Kvapil
30adc52ce3
[Backport release-0.41] fix coredns serviceaccount to match kubernetes bootstrap rbac (#1978) 
# Description
Backport of #1958 to `release-0.41`.
 2026-02-04 02:04:27 +01:00
mattia-eleuteri
044dae0d1e fix coredns serviceaccount to match kubernetes bootstrap rbac 
The Kubernetes bootstrap creates a ClusterRoleBinding 'system:kube-dns'
that references ServiceAccount 'kube-dns' in 'kube-system'. However,
the coredns chart was using the 'default' ServiceAccount because
serviceAccount.create was not enabled.

This caused CoreDNS pods to fail with 'Failed to watch' errors after
restarts, as they lacked RBAC permissions to watch the Kubernetes API.

Configure the chart to create the 'kube-dns' ServiceAccount, which
matches the expected binding from Kubernetes bootstrap.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: mattia-eleuteri <mattia@hidora.io>
(cherry picked from commit 7320edd71d)
 2026-02-04 01:02:13 +00:00
Andrei Kvapil
26e083a71e
[Backport release-0.41] [1.0][branding] Separate values for keycloak (#1963) 
# Description
Backport of #1947 to `release-0.41`.
 2026-02-03 13:05:54 +01:00
Andrei Kvapil
8468711545
[Backport release-0.41] [vm] allow changing field external after creation (#1962) 
# Description
Backport of #1956 to `release-0.41`.
 2026-02-03 13:05:44 +01:00
Andrei Kvapil
462ab1bdcb
Release v0.41.5 (#1936) 
This PR prepares the release `v0.41.5`.
 2026-02-03 08:35:52 +01:00
cozystack-bot
a3821162af Prepare release v0.41.5 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-03 01:39:08 +00:00
Andrei Kvapil
0838bafdb9
[Backport release-0.41] fix manifests for kubernetes deployment (#1945) 
# Description
Backport of #1943 to `release-0.41`.
 2026-02-02 22:08:03 +01:00
Andrei Kvapil
9723992410
[0.41][branding] Separate values for keycloak (#1946) 
## What this PR does
Adds separate values to keycloak branding.

### Release note
```release-note
Added separate values to keycloak branding
```
 2026-02-02 22:07:08 +01:00
nbykov0
3b904d83a8 [branding] Separate values for keycloak 
Signed-off-by: nbykov0 <166552198+nbykov0@users.noreply.github.com>
(cherry picked from commit 8a034c58b1)
 2026-02-02 21:06:57 +00:00
Kirill Ilin
96b801b06b [vm] allow changing field external after creation 
Service will be recreated

Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 3a8e8fc290)
 2026-02-02 21:05:22 +00:00
Andrei Kvapil
4048234b9d
[Backport release-0.41] Add instance profile label to workload monitor (#1957) 
# Description
Backport of #1954 to `release-0.41`.
 2026-02-02 22:04:28 +01:00
Timofei Larkin
b8d32fb894 Apply suggestion from @gemini-code-assist[bot] 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 09cd9e05c3)
 2026-02-02 14:15:16 +00:00
Matthieu ROBIN
eae630ffb5 Update internal/controller/workloadmonitor_controller.go 
Co-authored-by: Timofei Larkin <lllamnyp@gmail.com>
Signed-off-by: Matthieu ROBIN <info@matthieurobin.com>
(cherry picked from commit 3f59ce4876)
 2026-02-02 14:15:16 +00:00
Matthieu ROBIN
c514d7525b Add instance profile label to workload monitor 
Signed-off-by: Matthieu ROBIN <info@matthieurobin.com>
(cherry picked from commit 1e8da1fca4)
 2026-02-02 14:15:16 +00:00
nbykov0
d0bb00f3cd [branding] Separate values for keycloak 
Signed-off-by: nbykov0 <166552198+nbykov0@users.noreply.github.com>
 2026-02-02 12:51:05 +03:00
IvanHunters
6db4bb15d2 fix manifests for kubernetes deployment 
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
(cherry picked from commit 281715b365)
 2026-02-02 09:33:24 +00:00
Andrei Kvapil
4f3502456f
[Backport release-0.41] [dashboard] Add resource quota usage to tenant details page (#1932) 
# Description
Backport of #1929 to `release-0.41`.
 2026-01-29 10:31:39 +01:00
Andrei Kvapil
8d803cd619
[Backport release-0.41] [dashboard] Add "Edit" button to all resources (#1931) 
# Description
Backport of #1928 to `release-0.41`.
 2026-01-29 10:31:28 +01:00
Kirill Ilin
7ebcc0d264 [dashboard] Add resource quota usage to tenant info resource 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 9e63bd533c)
 2026-01-29 09:30:42 +00:00
Kirill Ilin
21e7183375 [dashboard] Add "Edit" button to all resources 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit a56fc00c5c)
 2026-01-29 09:29:12 +00:00
Andrei Kvapil
760c732ed6
Release v0.41.4 (#1926) 
This PR prepares the release `v0.41.4`.
 2026-01-29 10:08:40 +01:00
cozystack-bot
c7e54262f1 Prepare release v0.41.4 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-29 01:39:21 +00:00
Andrei Kvapil
6d772811dd
Update cozyhr v1.6.1 
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
 2026-01-27 23:10:34 +01:00
Andrei Kvapil
c8dbad7dc9
Release v0.41.3 (#1916) 
This PR prepares the release `v0.41.3`.
 2026-01-27 18:56:59 +01:00
Andrei Kvapil
f54a1e6911
[Backport release-0.41] [dashboard] Improve dashboard session params (#1920) 
# Description
Backport of #1913 to `release-0.41`.
 2026-01-27 18:56:38 +01:00
Timofei Larkin
ca3d5e1a5b [dashboard] Improve dashboard session params 
## What this PR does

This patch enables the `offline_access` scope for the dashbord keycloak
client, so that users get a refresh token which gatekeeper can use to
automatically refresh an expiring access token. Also session timeouts
were increased.

### Release note

```release-note
[dashboard] Increase session timeouts, add the offline_access scope,
enable refresh tokens to improve the overall user experience when
working with the dashboard.
```

Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 7cebafbafd)
 2026-01-27 17:18:43 +00:00
cozystack-bot
e67aed0e6c Prepare release v0.41.3 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-27 01:37:01 +00:00
Andrei Kvapil
0129f20ae4
[Backport release-0.41] [kubernetes] show Service and Ingress resources for kubernetes app in… (#1915) 
# Description
Backport of #1912 to `release-0.41`.
 2026-01-26 18:36:14 +01:00
Andrei Kvapil
58e2b4c632
[Backport release-0.41] [dashboard] Fix filtering on Pods tab for Service (#1914) 
# Description
Backport of #1909 to `release-0.41`.
 2026-01-26 18:36:05 +01:00
Kirill Ilin
056a0d801e [kubernetes] show Service and Ingress resources for kubernetes app in dashboard 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit befbdf0964)
 2026-01-26 17:35:10 +00:00
Kirill Ilin
f8b2aa8343 [dashboard] Fix filtering on Pods tab for Service 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit ee759dd11e)
 2026-01-26 17:33:29 +00:00
Andrei Kvapil
f1f1ff5681
Release v0.41.2 (#1907) 
This PR prepares the release `v0.41.2`.
 2026-01-23 09:07:49 +01:00
cozystack-bot
d4ffce1ff6 Prepare release v0.41.2 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-23 01:34:38 +00:00
Andrei Kvapil
a24174a0c3
[Backport release-0.41] [monitoring-agents] Set minReplicas to 1 for VPA for VMAgent (#1905) 
# Description
Backport of #1894 to `release-0.41`.
 2026-01-22 23:18:11 +01:00