vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2160 commits 288 branches 211 tags 26 MiB
Commit graph

2160 commits

This branch
This branch
All branches
Author SHA1 Message Date
Andrei Kvapil
1c3a5f721c
Release v0.41.7 (#1995) 
This PR prepares the release `v0.41.7`.
 2026-02-06 08:56:31 +01:00
cozystack-bot
6274f91c74 Prepare release v0.41.7 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-06 01:40:42 +00:00
Andrei Kvapil
f347b4fd70
[Backport release-0.41] fix(postgres-operator): correct PromQL syntax in CNPGClusterOffline alert (#1989) 
# Description
Backport of #1981 to `release-0.41`.
 2026-02-05 20:34:33 +01:00
mattia-eleuteri
40d51f4f92 fix(postgres-operator): correct PromQL syntax in CNPGClusterOffline alert 
Remove extra closing parenthesis in the CNPGClusterOffline alert expression
that causes vmalert pods to crash with "bad prometheus expr" error.

Signed-off-by: mattia-eleuteri <mattia@hidora.io>
(cherry picked from commit 2cb299e602)
 2026-02-05 19:25:36 +00:00
Andrei Kvapil
38c73ae3bd
[Backport release-0.41] [dashboard] Verify JWT token (#1983) 
# Description
Backport of #1980 to `release-0.41`.
 2026-02-05 09:39:31 +01:00
Timofei Larkin
0496a1b0e8 [dashboard] Verify JWT token 
## What this PR does

When OIDC is disabled, the dashboard's token-proxy now properly
validates bearer tokens against the k8s API's JWKS url.

### Release note

```release-note
[dashboard] Verify bearer tokens against the issuer's JWKS url.
```

Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 23e399bd9a)
 2026-02-04 15:11:15 +00:00
Andrei Kvapil
b49a6d1152
Release v0.41.6 (#1979) 
This PR prepares the release `v0.41.6`.
 2026-02-04 04:02:38 +01:00
cozystack-bot
0dac208d43 Prepare release v0.41.6 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-04 01:41:27 +00:00
Andrei Kvapil
30adc52ce3
[Backport release-0.41] fix coredns serviceaccount to match kubernetes bootstrap rbac (#1978) 
# Description
Backport of #1958 to `release-0.41`.
 2026-02-04 02:04:27 +01:00
mattia-eleuteri
044dae0d1e fix coredns serviceaccount to match kubernetes bootstrap rbac 
The Kubernetes bootstrap creates a ClusterRoleBinding 'system:kube-dns'
that references ServiceAccount 'kube-dns' in 'kube-system'. However,
the coredns chart was using the 'default' ServiceAccount because
serviceAccount.create was not enabled.

This caused CoreDNS pods to fail with 'Failed to watch' errors after
restarts, as they lacked RBAC permissions to watch the Kubernetes API.

Configure the chart to create the 'kube-dns' ServiceAccount, which
matches the expected binding from Kubernetes bootstrap.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: mattia-eleuteri <mattia@hidora.io>
(cherry picked from commit 7320edd71d)
 2026-02-04 01:02:13 +00:00
Andrei Kvapil
26e083a71e
[Backport release-0.41] [1.0][branding] Separate values for keycloak (#1963) 
# Description
Backport of #1947 to `release-0.41`.
 2026-02-03 13:05:54 +01:00
Andrei Kvapil
8468711545
[Backport release-0.41] [vm] allow changing field external after creation (#1962) 
# Description
Backport of #1956 to `release-0.41`.
 2026-02-03 13:05:44 +01:00
Andrei Kvapil
462ab1bdcb
Release v0.41.5 (#1936) 
This PR prepares the release `v0.41.5`.
 2026-02-03 08:35:52 +01:00
cozystack-bot
a3821162af Prepare release v0.41.5 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-02-03 01:39:08 +00:00
Andrei Kvapil
0838bafdb9
[Backport release-0.41] fix manifests for kubernetes deployment (#1945) 
# Description
Backport of #1943 to `release-0.41`.
 2026-02-02 22:08:03 +01:00
Andrei Kvapil
9723992410
[0.41][branding] Separate values for keycloak (#1946) 
## What this PR does
Adds separate values to keycloak branding.

### Release note
```release-note
Added separate values to keycloak branding
```
 2026-02-02 22:07:08 +01:00
nbykov0
3b904d83a8 [branding] Separate values for keycloak 
Signed-off-by: nbykov0 <166552198+nbykov0@users.noreply.github.com>
(cherry picked from commit 8a034c58b1)
 2026-02-02 21:06:57 +00:00
Kirill Ilin
96b801b06b [vm] allow changing field external after creation 
Service will be recreated

Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 3a8e8fc290)
 2026-02-02 21:05:22 +00:00
Andrei Kvapil
4048234b9d
[Backport release-0.41] Add instance profile label to workload monitor (#1957) 
# Description
Backport of #1954 to `release-0.41`.
 2026-02-02 22:04:28 +01:00
Timofei Larkin
b8d32fb894 Apply suggestion from @gemini-code-assist[bot] 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 09cd9e05c3)
 2026-02-02 14:15:16 +00:00
Matthieu ROBIN
eae630ffb5 Update internal/controller/workloadmonitor_controller.go 
Co-authored-by: Timofei Larkin <lllamnyp@gmail.com>
Signed-off-by: Matthieu ROBIN <info@matthieurobin.com>
(cherry picked from commit 3f59ce4876)
 2026-02-02 14:15:16 +00:00
Matthieu ROBIN
c514d7525b Add instance profile label to workload monitor 
Signed-off-by: Matthieu ROBIN <info@matthieurobin.com>
(cherry picked from commit 1e8da1fca4)
 2026-02-02 14:15:16 +00:00
nbykov0
d0bb00f3cd [branding] Separate values for keycloak 
Signed-off-by: nbykov0 <166552198+nbykov0@users.noreply.github.com>
 2026-02-02 12:51:05 +03:00
IvanHunters
6db4bb15d2 fix manifests for kubernetes deployment 
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
(cherry picked from commit 281715b365)
 2026-02-02 09:33:24 +00:00
Andrei Kvapil
4f3502456f
[Backport release-0.41] [dashboard] Add resource quota usage to tenant details page (#1932) 
# Description
Backport of #1929 to `release-0.41`.
 2026-01-29 10:31:39 +01:00
Andrei Kvapil
8d803cd619
[Backport release-0.41] [dashboard] Add "Edit" button to all resources (#1931) 
# Description
Backport of #1928 to `release-0.41`.
 2026-01-29 10:31:28 +01:00
Kirill Ilin
7ebcc0d264 [dashboard] Add resource quota usage to tenant info resource 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 9e63bd533c)
 2026-01-29 09:30:42 +00:00
Kirill Ilin
21e7183375 [dashboard] Add "Edit" button to all resources 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit a56fc00c5c)
 2026-01-29 09:29:12 +00:00
Andrei Kvapil
760c732ed6
Release v0.41.4 (#1926) 
This PR prepares the release `v0.41.4`.
 2026-01-29 10:08:40 +01:00
cozystack-bot
c7e54262f1 Prepare release v0.41.4 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-29 01:39:21 +00:00
Andrei Kvapil
6d772811dd
Update cozyhr v1.6.1 
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
 2026-01-27 23:10:34 +01:00
Andrei Kvapil
c8dbad7dc9
Release v0.41.3 (#1916) 
This PR prepares the release `v0.41.3`.
 2026-01-27 18:56:59 +01:00
Andrei Kvapil
f54a1e6911
[Backport release-0.41] [dashboard] Improve dashboard session params (#1920) 
# Description
Backport of #1913 to `release-0.41`.
 2026-01-27 18:56:38 +01:00
Timofei Larkin
ca3d5e1a5b [dashboard] Improve dashboard session params 
## What this PR does

This patch enables the `offline_access` scope for the dashbord keycloak
client, so that users get a refresh token which gatekeeper can use to
automatically refresh an expiring access token. Also session timeouts
were increased.

### Release note

```release-note
[dashboard] Increase session timeouts, add the offline_access scope,
enable refresh tokens to improve the overall user experience when
working with the dashboard.
```

Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 7cebafbafd)
 2026-01-27 17:18:43 +00:00
cozystack-bot
e67aed0e6c Prepare release v0.41.3 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-27 01:37:01 +00:00
Andrei Kvapil
0129f20ae4
[Backport release-0.41] [kubernetes] show Service and Ingress resources for kubernetes app in… (#1915) 
# Description
Backport of #1912 to `release-0.41`.
 2026-01-26 18:36:14 +01:00
Andrei Kvapil
58e2b4c632
[Backport release-0.41] [dashboard] Fix filtering on Pods tab for Service (#1914) 
# Description
Backport of #1909 to `release-0.41`.
 2026-01-26 18:36:05 +01:00
Kirill Ilin
056a0d801e [kubernetes] show Service and Ingress resources for kubernetes app in dashboard 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit befbdf0964)
 2026-01-26 17:35:10 +00:00
Kirill Ilin
f8b2aa8343 [dashboard] Fix filtering on Pods tab for Service 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit ee759dd11e)
 2026-01-26 17:33:29 +00:00
Andrei Kvapil
f1f1ff5681
Release v0.41.2 (#1907) 
This PR prepares the release `v0.41.2`.
 2026-01-23 09:07:49 +01:00
cozystack-bot
d4ffce1ff6 Prepare release v0.41.2 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-23 01:34:38 +00:00
Andrei Kvapil
a24174a0c3
[Backport release-0.41] [monitoring-agents] Set minReplicas to 1 for VPA for VMAgent (#1905) 
# Description
Backport of #1894 to `release-0.41`.
 2026-01-22 23:18:11 +01:00
Kirill Ilin
d91f1f1882 [monitoring-agents] Set minReplicas to 1 for VPA for VMAgent 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 207a5171f0)
 2026-01-22 22:17:25 +00:00
Andrei Kvapil
e38b7a0afd
[Backport release-0.41] [mongodb] Remove user-configurable images from MongoDB chart (#1904) 
# Description
Backport of #1901 to `release-0.41`.
 2026-01-22 23:16:34 +01:00
Andrei Kvapil
247e19252f [mongodb] Remove user-configurable images from MongoDB chart 
Remove the ability for users to specify custom container images
(images.pmm and images.backup) in the MongoDB application values.

This is a security hardening measure - allowing users to specify
arbitrary container images could lead to running malicious or
compromised images, supply chain attacks, or privilege escalation.

The images are now hardcoded in the template:
- percona/pmm-client:2.44.1
- percona/percona-backup-mongodb:2.11.0

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
(cherry picked from commit beb6e1a0ba)
 2026-01-22 22:15:29 +00:00
Andrei Kvapil
211d57b17a
Release v0.41.1 (#1900) 
This PR prepares the release `v0.41.1`.
 2026-01-22 09:14:27 +01:00
cozystack-bot
6d3f5bbc60 Prepare release v0.41.1 
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
 2026-01-22 01:34:35 +00:00
Andrei Kvapil
4532603bbd
[Backport release-0.41] [kubernetes] Add enum validation for IngressNginx exposeMethod (#1897) 
# Description
Backport of #1895 to `release-0.41`.
 2026-01-21 13:55:36 +01:00
Kirill Ilin
73cd3edbb7 [kubernetes] Add enum validation for IngressNginx exposeMethod 
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit 0b95a72fa3)
 2026-01-21 12:55:19 +00:00
Andrei Kvapil
ea466820fc
Release v0.41.0 (#1889) 
This PR prepares the release `v0.41.0`.
 2026-01-20 03:32:28 +01:00