3250 Commits

Author SHA1 Message Date
hongming
d14884cb6d deps: update go-jose to v4.0.5 (#6435)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-14 16:47:52 +08:00
smartcat999
e137fb7460 fix: regression bugs (#6432)
fix: extension delete logic

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-14 14:09:52 +08:00
hongming
a41915a33b docs: update security policy and supported versions in SECURITY.md (#6431)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-14 11:56:52 +08:00
hongming
3878877a83 docs: update contribution guidelines and add security section in README (#6429)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-13 11:28:51 +08:00
hongming
909afc4405 docs: update architecture image and social media link in README (#6425)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-12 18:39:51 +08:00
liujian
e4ed63ac95 Update util.go (#6423)
Signed-off-by: liujian <54946465+redscholar@users.noreply.github.com>
2025-03-12 15:53:49 +08:00
KubeSphere CI Bot
afe1372bc3 [kse-2286] replace storeCAFile use WithTLSConfig (#6400)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
2025-03-11 10:40:48 +08:00
KubeSphere CI Bot
0556934ecc [kse-2112] add extension version controller (#6399)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
2025-03-11 10:13:47 +08:00
smartcat999
7e2cafd15b update ks-core helm chart (#6401)
fix: cherrypick update ks-core helm chart

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-11 09:57:48 +08:00
smartcat999
41fdd0f4eb fix: replace user displayname with annotation (#6395)
Signed-off-by: peng wu <2030047311@qq.com>
2025-03-06 17:09:43 +08:00
smartcat999
2ed83e77d4 fix: During the creation of a workspace, it will be determined whethe… (#6385)
fix: During the creation of a workspace, it will be determined whethe… (#2147)

* fix: During the creation of a workspace, it will be determined whether the user has the authority to designate other users as administrators.



* fix: code update



* fix: Determine whether the user is a workspace administrator based on whether the user has the permission to delete the workspace



---------

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-03 16:11:39 +08:00
smartcat999
f77b0afd85 fix ldaps protocol (#6384)
fix: ldap default protocol (#2156)

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-03 16:03:40 +08:00
liujian
430a3589d8 feat: add category for deepseek (#6377)
Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-02-28 17:02:36 +08:00
smartcat999
8056d176f8 fix: Fixed the issue where the user status was empty when the third-p… (#6379)
fix: Fixed the issue where the user status was empty when the third-p… (#2258)

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time



* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time



---------

Signed-off-by: peng wu <2030047311@qq.com>
2025-02-28 16:57:36 +08:00
hongming
c1259aff8b feat: platform config API (#2052) (#6303)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-02-28 16:48:44 +08:00
hongming
018f6045ee feat(auth): support multiple identity provider associations (#6299)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-02-28 16:48:36 +08:00
smartcat999
99d2408c34 fix: pod list with owner filter logic (#6370)
Signed-off-by: peng wu <2030047311@qq.com>
2025-02-19 10:41:25 +08:00
smartcat999
d38db0054c Fix dependency cves (#6353)
* Upgraded golang.org/x/crypto v0.28.0 => v0.31.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded golang.org/x/net v0.30.0 => v0.33.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/golang/glog v1.2.2 => v1.2.4. Fix CVE-2024-45339.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgrade go stdlib from 1.22.8 to 1.22.11. Fix CVE-2024-45336.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/go-git/go-git/v5 v5.11.0 => v5.13.0. Fix CVE-2025-21613、CVE-2025-21614.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded telemetry v1.0.1 => v1.0.2. Fix CVE-2024-45338、CVE-2024-34156、CVE-2024-34155、CVE-2024-34158、CVE-2024-4536、CVE-2024-45341.

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
2025-02-08 14:54:12 +08:00
liujian
b4069c6b3d fix: fix cve for telemetry and kubesphere (#6352)
fix: cve

Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-02-08 10:12:12 +08:00
smartcat999
f390d46da2 Fix OIDC logout redirect uri (#6348)
* fix: oidc logout redirect uri

Signed-off-by: peng wu <2030047311@qq.com>

* fix: oidc unittest

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
2025-02-05 11:11:09 +08:00
Wenhao Zhou
7ce92c801a [application] add sortBy parameter versionName (#6333)
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
2025-01-15 10:22:45 +08:00
hongming
452d09775a adjust the authorization rules for workspace roles (#6329)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-01-06 15:34:24 +08:00
KubeSphere CI Bot
a84a6892e4 Merge pull request #6324 from wansir/m3
Optimize log output
2024-12-30 11:09:14 +08:00
smartcat999
bc128dcf78 Fix workspacerole sync condition (#2142)
* fix: Fixed the issue that role and rolebinding do not trigger synchronization when binding a workspace to a cluster

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update workspace sync condition && update list options

Signed-off-by: peng wu <2030047311@qq.com>

* fix: rename enqueue request map func for workspacerole and workspacerolebinding

Signed-off-by: peng wu <2030047311@qq.com>

* fix: workspace role sync logic

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-30 10:55:03 +08:00
hongming
3d40b1905d fix: the problem of conflicting controller output logs caused by duplicate initialization of roles and workspace roles when the controller is started (#2139)
Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-26 15:51:44 +08:00
hongming
68075ac3dc clean up unnecessary warning logs (#2140)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-26 15:51:44 +08:00
hongming
7a3a99cecb fix workspace role name exceeding the length limit (#2132)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-26 15:51:44 +08:00
hongming
255e9a228d clean up unnecessary warning logs (#6323)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-25 11:08:09 +08:00
smartcat999
68c13b78ee fix: support LDAPS && STARTTLS (#6320)
Signed-off-by: peng wu <2030047311@qq.com>
2024-12-24 10:39:08 +08:00
hongming
97d131e251 fix: incorrect redis config (#2130) (#6316)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-20 14:37:04 +08:00
hongming
65eb534ed9 chore: add helm release namespace check (#6315)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-12-16 18:47:59 +08:00
凌波
54f4a9b893 feat: Enhance JSBundle Api to declare auxiliary asset files required for extending components (#6308)
feat: add support for auxiliary asset files to jsBundle

Signed-off-by: lingbo <lingbo@lingbohome.com>
2024-12-12 16:58:55 +08:00
KubeSphere CI Bot
af14da361b Merge pull request #6304 from wansir/dev4
support for configuring affinity for helm executor
2024-12-05 14:45:46 +08:00
KubeSphere CI Bot
6274978709 fix helm executor serviceaccount not created (#1948)
Co-authored-by: hongming <coder.scala@gmail.com>
2024-12-05 11:10:23 +08:00
Xinzhao Xu
e389253a4e Support for configuring affinity for helm executor (#1989) 2024-12-05 11:08:14 +08:00
Wenhao Zhou
2af9ffa61c fix: make the prerelease version compatible (#6300)
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
2024-12-03 15:15:43 +08:00
liujian
d0483aa39a feature: reduce telemetry dependence. (#6276)
Co-authored-by: joyceliu <joyceliu@yunify.com>
2024-11-26 11:31:35 +08:00
hongming
fa7c1340e3 Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-11-26 11:13:36 +08:00
liujian
9c962d3cbf feat: create extensionVersions by depth (#6286)
* feat: create extensionVersions by depth

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

---------

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-11-26 10:47:36 +08:00
liujian
238bd67b8f fix: update license-eye version to v0.6.0 (#6288)
Co-authored-by: joyceliu <joyceliu@yunify.com>
2024-11-26 10:17:36 +08:00
inksnw
637950c979 update workloadtemplates RoleTemplate (#6285) 2024-11-25 17:27:35 +08:00
inksnw
bac3bc62f9 Support manual triggering of a repository update. (#6280)
* Support manual triggering of a repository update.

* cherry pick add api for workload template (#1982)

* cherry pick (add operator application (#1970))

* Modify routing implementation to improve readability

* cherry pick from kse dfc40e5adf5aa2e67d1

* Filter by Routing Parameter Namespace (#1990)

* add doc for workloadtemplates
2024-11-25 10:56:35 +08:00
hongming
096e0ca868 fix regression bug (#6269)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-11-06 15:37:14 +08:00
hongming
cfebd96a1f update dependencies (#6267)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-11-06 10:27:06 +08:00
KubeSphere CI Bot
faf255a084 Merge pull request #6260 from zhou1203/disable-redis
enhancement: disable redis when running as member cluster
2024-11-01 12:27:08 +08:00
liujian
dca9c3d772 fix: publishing bot run failed (#6262)
fix: publish run failed

Signed-off-by: liujian <54946465+redscholar@users.noreply.github.com>
2024-11-01 10:25:08 +08:00
Wenhao Zhou
c5e2800ab2 feat: support listing cluster that user has the cluster`s rolebinding (#6259) 2024-10-31 17:31:07 +08:00
Xinzhao Xu
6205e44817 fix: cache checking always evaluates to true 2024-10-31 17:30:37 +08:00
inksnw
5702930c08 Fix conflict and cherry-pick (cherry-pick from #0e8c6d5) (#6261) 2024-10-31 17:26:07 +08:00
Wenhao Zhou
4fa4f5b42d enhancement: disable redis when running as member cluster
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
2024-10-31 16:38:38 +08:00