cozystack/packages/apps
mattia-eleuteri 1dfa6c4317 [kubernetes] Fix CiliumNetworkPolicy endpointSelector for multi-node RWX volumes
When an NFS-backed RWX volume is published to multiple VMs, the
CiliumNetworkPolicy egress rule only allowed traffic from the first VM.
The endpointSelector.matchLabels was set once on creation and never
broadened, causing NFS mounts to hang on all nodes except the first.

Switch from matchLabels to matchExpressions (operator: In) so the
selector can list multiple VM names. Rebuild the selector whenever
ownerReferences are added or removed.

Signed-off-by: mattia-eleuteri <mattia@hidora.io>
(cherry picked from commit cc5ec0b7a3)
2026-03-16 16:22:05 +00:00
..
bucket refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
clickhouse refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
foundationdb refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
harbor feat(platform): Changed ingress annotation rendering for http01 solver 2026-02-20 11:45:04 +05:00
http-cache Prepare release v1.0.0-beta.6 2026-02-17 22:36:40 +00:00
kafka refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
kubernetes [kubernetes] Fix CiliumNetworkPolicy endpointSelector for multi-node RWX volumes 2026-03-16 16:22:05 +00:00
mariadb feat(platform): add migration 27 to rename mysql resources to mariadb 2026-02-12 15:16:29 +01:00
mongodb fix(mongodb): update MongoDB logo 2026-02-10 21:17:50 +01:00
nats Add monitoring for NATs 2026-02-17 22:54:12 +01:00
postgres refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
qdrant [qdrant] Add Qdrant vector database application 2026-02-06 13:30:58 +03:00
rabbitmq refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
redis refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
tcp-balancer refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
tenant fix(etcd): increase HelmRelease timeout to 30m for cert rotation 2026-02-24 23:34:47 +01:00
vm-disk refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
vm-instance fix(migration): preserve VM MAC address during virtual-machine to vm-instance migration 2026-03-10 14:18:35 +00:00
vpc feat(vpc): migrate subnets definition from map to array format 2026-02-15 21:34:19 +01:00
vpn refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
Makefile refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
README.md [clickhouse] add clickhouse keeper 2025-08-07 14:07:05 +03:00

How to test packages local

cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd