Commit Graph

107 Commits

Author SHA1 Message Date
hysyeah
810253fe94 kubeblocks: skip check pod spec,status image (#2414)
fix: skip check pod spec,status image
2026-01-14 23:57:45 +08:00
dkeven
adea16ce7e feat(gpu): update gpu plugin version to v2.6.8 (#2410) 2026-01-14 23:55:48 +08:00
hysyeah
7eb21516d0 authelia,lldap: distinguish error message in firstfactor authentication (#2389) 2026-01-08 23:35:52 +08:00
dkeven
1ddcc3bd4c fix(gpu): handle scheduler inconsistency and device stuck in unhealthy (#2371) 2026-01-05 23:44:50 +08:00
hysyeah
65b32c7c41 kubeblocks-addon: fix kubeblocks-addon rabbitmq image pull policy (#2356)
fix: kubeblocks-addon rabbitmq image pull policy
2025-12-31 15:10:26 +08:00
eball
87674cc5d9 opa: update image validation to exclude alpine and mariadb images (#2337) 2025-12-27 14:04:31 +08:00
eball
ff609db1aa tapr: change kvrocks to run as root by default (#2332)
* tapr: upgrade pod template and image for PGCluster reconciliation (#2213)

* tapr: upgrade pod template and image for PGCluster reconciliation

* fix(ci): specify working directory in github action for tapr (#2215)

---------

Co-authored-by: dkeven <82354774+dkeven@users.noreply.github.com>

* tapr: upgrade pod template and image for PGCluster reconciliation

* fix(kvrocks): update init container image and pull policy configuration (#2331)

* tapr: change kvrocks running as root by default

---------

Co-authored-by: dkeven <82354774+dkeven@users.noreply.github.com>
2025-12-26 19:40:48 +08:00
eball
8b1a7e11f5 opa: enhance image trust validation by trimming docker.io prefix (#2308)
* opa: enhance image trust validation by trimming docker.io prefix

* fix: correct typo in image trimming function name in untrusted image checks
2025-12-25 00:20:08 +08:00
dependabot[bot]
2181adb67c chore(deps): bump github.com/gofiber/fiber/v2 from 2.49.2 to 2.52.9 in /platform/tapr (#2309)
chore(deps): bump github.com/gofiber/fiber/v2 in /platform/tapr

Bumps [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) from 2.49.2 to 2.52.9.
- [Release notes](https://github.com/gofiber/fiber/releases)
- [Commits](https://github.com/gofiber/fiber/compare/v2.49.2...v2.52.9)

---
updated-dependencies:
- dependency-name: github.com/gofiber/fiber/v2
  dependency-version: 2.52.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 15:47:43 +08:00
eball
70d0ae1ff5 opa: add trusted image for kldtks image repo (#2301) 2025-12-23 23:49:01 +08:00
eball
6ae9677a43 opa: enhance untrusted image checks in deployment configuration (#2281)
* opa: enhance untrusted image checks in deployment configuration

* fix: update image checks to exclude apecloud images

* fix: exclude docker.io/apecloud images from image checks
2025-12-19 23:36:35 +08:00
hysyeah
dfd74239dd kubeblock-addons: fix image repo transfer due to opa (#2275) 2025-12-18 23:21:08 +08:00
eball
60f3976da9 tapr: upgrade pod template and image for PGCluster reconciliation (#2219)
* tapr: upgrade pod template and image for PGCluster reconciliation (#2213)

* tapr: upgrade pod template and image for PGCluster reconciliation

* fix(ci): specify working directory in github action for tapr (#2215)

---------

Co-authored-by: dkeven <82354774+dkeven@users.noreply.github.com>

* tapr: upgrade pod template and image for PGCluster reconciliation

---------

Co-authored-by: dkeven <82354774+dkeven@users.noreply.github.com>
2025-12-11 21:43:53 +08:00
dkeven
2f87901cf8 feat(cli): add command to forcefully reset password (#2202)
* feat(cli): add command to forcefully reset password

* feat(deploy): update authelia image to version 0.2.43 and add verbosity to system provider logs

* lldap image tag

* fix: update lldap to 0.0.16

---------

Co-authored-by: eball <liuy102@hotmail.com>
Co-authored-by: hys <hysyeah@gmail.com>
2025-12-11 21:12:47 +08:00
dkeven
ba8c7faa7d refactor: integrate module tapr into main repo (#2209) 2025-12-11 19:11:04 +08:00
hysyeah
4d061544a6 feat: add argo workflow to os-platform (#2182)
* feat: add argo workflow to os-platform

* fix: argo pg database

* fix: add argo crd
2025-12-09 23:35:13 +08:00
eball
6ebb19db03 tapr: fix reconciling kvrocks creating event bug (#2179)
* tapr: fix reconciling kvrocks creating event bug

* Update middleware-operator image version to 0.2.28
2025-12-09 23:34:12 +08:00
eball
a08fd3b28c opa: add check for docker.io image registry in container policy (#2178) 2025-12-09 23:33:54 +08:00
hysyeah
1e5176f17b app-service: fix open telemetry issue (#2177) 2025-12-09 21:42:15 +08:00
eball
605b862937 opa: update image restriction to include docker.io prefix for beclab (#2172)
fix: update image restriction to include docker.io prefix for beclab
2025-12-08 21:38:32 +08:00
hysyeah
0110413528 tapr: kvrocks upgrade (#2173) 2025-12-08 21:32:59 +08:00
hysyeah
97dd238c44 tapr: new middleware list api (#2165)
* tapr: new middleware list api

* Update middleware operator image version to 0.2.25

---------

Co-authored-by: eball <liuy102@hotmail.com>
2025-12-05 22:49:29 +08:00
eball
3095530d0d opa: add untrusted image policy (#2135)
* feat(opa): add untrusted image check and update webhook configuration

* fix: add separator before untrusted pod check ConfigMap

* fix: remove specific image checks from untrusted pod validation

* fix: remove specific image checks from untrusted pod validation

* feat: add priority class and node affinity for OPA deployment
2025-12-05 20:20:03 +08:00
eball
ba8868d771 tapr: add middleware label to nats deployment (#2160)
fix: update app-service image version to 0.4.54 and add middleware label to nats deployment
2025-12-05 00:17:24 +08:00
hysyeah
cb17633f57 authelia,lldap: firstfactor return more clear message (#2157) 2025-12-05 00:16:24 +08:00
eball
18e94af22b opa: enhance validating webhook with namespace selectors (#2154)
Added namespace selectors to validating webhook configuration to exclude specific namespaces.
2025-12-04 16:31:24 +08:00
hysyeah
e5fef95f4e node-exporter: fix disk scan open error (#2151) 2025-12-04 00:21:01 +08:00
eball
505a438fa3 fix: Update fsnotify_daemon.yaml (#2145) 2025-12-03 11:06:07 +08:00
eball
08a380df61 jfsnotify: update jfsnotify daemon volume configurations (#2138) 2025-12-02 23:39:07 +08:00
dkeven
f7c7939493 feat(gpu): clear GPU bindings of uninstalled App (#2129) 2025-11-28 23:59:45 +08:00
hysyeah
95ad815142 app-service: add gpu memory size check (#2122) 2025-11-27 23:54:23 +08:00
eball
7f27a03e84 opa: ignore validating opa pod itself (#2118)
* opa: ignore validating opa pod itself

* opa: add uid to response in decision logic

* opa: add apiVersion and kind to admission review response
2025-11-27 16:19:56 +08:00
eball
3991bc2e08 opa: add opa based admission control to Olares (#2110)
* opa: add opa based admission control to Olares

* fix(deployment): add selector to opa deployment spec

* fix(deployment): update Deployment API version to apps/v1

* fix(deployment): remove insecure address option from OPA deployment

* fix(deployment): update OPA image version and adjust service port configuration

* fix(deployment): add debug logging and enable policies in OPA deployment
2025-11-27 01:13:53 +08:00
hysyeah
21cf7466ee app-service,hami: hardware info inject to values (#2108)
* app-service,hami: hardware info inject to values

* copy embed files
2025-11-27 01:00:08 +08:00
eball
5be2c61091 hami: bump hami version to v2.6.4 (#2104) 2025-11-25 23:44:29 +08:00
eball
206c946408 app-service, tapr, bfl: add shared entrance url api and fix some bugs (#2101) 2025-11-25 21:12:57 +08:00
eball
3f6bc2bf36 app-service, tapr: implement shared entrances (#2098)
* app-service, tapr: implement shared entrances

* Update app-service image version to 0.4.46
2025-11-24 23:54:06 +08:00
eball
355f7c4e69 coredns,bfl,l4: resolving domain to cluster ip in pods (#2085) 2025-11-19 00:24:30 +08:00
dkeven
2c3c949bc9 feat(gpu): add an API to switch GPUBindings in bulk for app (#2083) 2025-11-18 23:39:13 +08:00
hysyeah
aff0b38c0b fix: set priority for ks,node-exporter,prometheus (#2079)
* fix: set priority for ks,node-exporter,prometheus

* fix: add priority class for download
2025-11-17 23:54:55 +08:00
eball
01324970b4 daemon: Implement DSR Proxy for handling DNS requests and responses (#2057)
* daemon: Implement DSR Proxy for handling DNS requests and responses

* fix: update DSR proxy logging and improve DNS pod configuration handling

* fix: update sys-event deployment to include additional permissions and bump image version

* fix: update install step to include pcap-devel package

* fix: correct spelling in install step for udev-devel and pcap-devel

* fix: refactor DSRProxy implementation for better clarity and organization

* fix: build arm64

* fix: update sys-event image version to 0.2.12

---------

Co-authored-by: liuyu <>
2025-11-13 11:59:46 +08:00
hysyeah
ec6ce88e08 app-service,tapr: support app clone;es,minio prefix bucket,index manager (#2047) 2025-11-08 01:36:41 +08:00
eball
7f6091afb1 juicefs: bump version to v1.3.0 in Olares.yaml (#1993) 2025-10-27 18:52:31 +08:00
eball
70185da4a7 refactor: change the backend of JuiceFS notify daemon to inotify (#1989)
fix: update fsnotify daemon and proxy images to v0.1.4 and v0.1.11 respectively
2025-10-25 00:34:24 +08:00
dkeven
0325f41617 fix(gpu): make App and GPU binding request idempotent (#1973) 2025-10-23 11:03:48 +08:00
dkeven
8aa08d041d chore: clean up and migrate from legacy envs (#1946)
* chore(cli): get rid of injection of legacy envs

* chore(cli): clean up legacy env MARKET_PROVIDER

* chore: rename download cdn url to olares cdn service

* chore: change default cdn service url
2025-10-18 00:13:50 +08:00
hysyeah
07fe0fd852 tapr: fix minio policy was override when set multi bucket (#1945)
tapr: fix minio policy was overwrite when set multi bucket
2025-10-18 00:11:52 +08:00
hysyeah
139d82eddf fix: add addon charts image (#1931) 2025-10-16 21:39:01 +08:00
dkeven
90ad4c73dd feat(gpu): export and serve GPU power limit metrics (#1927) 2025-10-16 00:15:53 +08:00
wiy
d98feab763 feat: update files cdn address (#1916)
feat: update files cdn address file.bttcdn.com to app.cdn.olares.com
2025-10-13 23:50:07 +08:00