Commit Graph

3224 Commits

Author SHA1 Message Date
hongming
11988f71e6 fix: add PersistentVolumeClaim definition to prepare upgrade job (#6483)
Signed-off-by: hongming <coder.scala@gmail.com>
helm-chart-1.1.5
2025-04-18 11:47:23 +08:00
hongming
3ef3a6bc98 Release v4.1.3 (#6459)
Signed-off-by: hongming <coder.scala@gmail.com>
v4.1.3
2025-03-24 11:10:23 +08:00
hongming
887496e746 Release 4.1.3-rc.0 (#6456)
Signed-off-by: hongming <coder.scala@gmail.com>
v4.1.3-rc.0
2025-03-21 11:33:00 +08:00
KubeSphere CI Bot
9423623603 chore: remove deprecated CronJob for restarting extensions museum (#6458)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-21 10:42:00 +08:00
KubeSphere CI Bot
3e936f9915 deps: update dependencies (#6454)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-19 15:32:58 +08:00
KubeSphere CI Bot
08fbb602a0 Merge pull request #6451 from wansir/release-4.1
Update branch to latest state
2025-03-19 14:24:59 +08:00
hongming
90a3b62e79 chore: update license header
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 14:18:09 +08:00
hongming
6da63b8ce5 chore: update ks-core helm chart
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 14:05:17 +08:00
hongming
0bd5ba16fe chore: generate crds
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 13:43:19 +08:00
hongming
8f5f603289 update application controllers log level
* [application] update application controllers log level

* update

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 13:37:12 +08:00
KubeSphere CI Bot
20bf33dfe1 fix: alias query not functioning (#2203)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-19 12:33:16 +08:00
KubeSphere CI Bot
3c2197df02 adjust the authorization rules for authenticated users (#2182)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-19 12:32:15 +08:00
hongming
2608892248 feat: add resource protection webhook (#2168)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 12:31:33 +08:00
smartcat999
760351d509 fix: update console permission with ks service account (#2135)
* fix: update console permission with ks service account

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update restart pod's annotation

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update restart pod condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: service account pod restart condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: service account pod restart condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 12:29:29 +08:00
hongming
c8e9ec83de chore: refine ks-core helm chart (#2128)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 12:27:57 +08:00
hongming
0a75abc32c security: restrict anonymous access to the /kapis/version endpoint (#2107)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 12:06:43 +08:00
hongming
a819b24d53 fix the x509 certificate error (#2092)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:46:38 +08:00
hongming
fd4fbfa5a7 update helm chart
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:45:46 +08:00
hongming
d52e847370 feat: support service account token auth mode
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:40:42 +08:00
smartcat999
c8bab29a6b fix: update annotations with user's idap labels (#2042) 2025-03-19 11:33:32 +08:00
smartcat999
5ae94c9a0c fix: the problem of unauthorized access in the namespace-manage-serviceaccount permission template of the Operator role under the namespace (#1991) 2025-03-19 11:31:52 +08:00
inksnw
c76f88ee62 fix typo (#1981) 2025-03-19 11:30:55 +08:00
hongming
92c004ada0 Support deleting repo and apps in repo (#1979)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:30:10 +08:00
KubeSphere CI Bot
42ef42ef12 fix serviceaccount controller remove unnecessary retries (#2188)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-19 11:29:21 +08:00
KubeSphere CI Bot
8286d4888e fix: sa binds rbac role (#2187)
* fix: sa binds rbac role

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* fix ut test

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* make goimports

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:28:36 +08:00
KubeSphere CI Bot
834c393cf0 add application release validatingWebhook (#2170)
* add application release validatingWebhook

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* enable at host cluster

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-19 11:24:02 +08:00
Wenhao Zhou
9f6f781a39 Update appversion finalizer name (#2161)
* update appversion finalizer name

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* Update pkg/controller/application/appversion_contrlller.go

* Update pkg/controller/application/appversion_contrlller.go

* Update staging/src/kubesphere.io/api/application/v2/constants.go

* Update staging/src/kubesphere.io/api/application/v2/constants.go

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-19 11:23:06 +08:00
KubeSphere CI Bot
96f85d4500 Allow version comparison errors (#2015)
Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-19 11:18:02 +08:00
yonghongshi
128e7da6f3 fix csidriver check (#1993)
Signed-off-by: stoneshi-yunify <stoneshi@kubesphere.io>
2025-03-19 11:15:26 +08:00
hongming
fa2c4672ea update pod status.Phase (#6448)
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: KubeSphere CI Bot <47586280+ks-ci-bot@users.noreply.github.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
2025-03-19 11:01:57 +08:00
hongming
d2a591ac75 feat: add imagesearch provider (#6447)
* feat: add imagesearch provider



* update



* update



* update



* update url and queries



* add func getProviderTypeByHost



---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: KubeSphere CI Bot <47586280+ks-ci-bot@users.noreply.github.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
2025-03-19 10:47:58 +08:00
hongming
8fa36615e1 chore: simplify telemetry config (#6441)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-17 10:55:56 +08:00
hongming
12dec1558f deps: update go-jose to v4.0.5 (#6435) (#6438)
(cherry picked from commit d14884cb6d)

Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-14 17:46:52 +08:00
KubeSphere CI Bot
58b811ee92 fix: regression bugs (#6433)
fix: extension delete logic

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-14 14:25:51 +08:00
KubeSphere CI Bot
9d88c8d3a7 [release-4.1] Update util.go (#6424)
Update util.go

Signed-off-by: liujian <54946465+redscholar@users.noreply.github.com>
Co-authored-by: liujian <54946465+redscholar@users.noreply.github.com>
2025-03-12 18:44:49 +08:00
smartcat999
844b04613d fix: helm template error (#6419)
Signed-off-by: peng wu <2030047311@qq.com>
2025-03-11 17:57:49 +08:00
hongming
7da8954488 Merge pull request #6417 from wansir/release-4.1
Merge master into branch release-4.1
2025-03-11 14:49:59 +08:00
KubeSphere CI Bot
f96e76ef2a [kse-2286] replace storeCAFile use WithTLSConfig (#6400)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
(cherry picked from commit afe1372bc3)
2025-03-11 14:36:00 +08:00
KubeSphere CI Bot
1b479a9084 [kse-2112] add extension version controller (#6399)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>

(cherry picked from commit 0556934ecc)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:35:20 +08:00
smartcat999
f1bb9d69ac fix: Fixed the issue where the user status was empty when the third-p… (#6379)
fix: Fixed the issue where the user status was empty when the third-p… (#2258)

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit 8056d176f8)
2025-03-11 14:32:29 +08:00
smartcat999
e7c97d3a56 Fix dependency cves (#6353)
* Upgraded golang.org/x/crypto v0.28.0 => v0.31.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded golang.org/x/net v0.30.0 => v0.33.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/golang/glog v1.2.2 => v1.2.4. Fix CVE-2024-45339.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgrade go stdlib from 1.22.8 to 1.22.11. Fix CVE-2024-45336.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/go-git/go-git/v5 v5.11.0 => v5.13.0. Fix CVE-2025-21613、CVE-2025-21614.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded telemetry v1.0.1 => v1.0.2. Fix CVE-2024-45338、CVE-2024-34156、CVE-2024-34155、CVE-2024-34158、CVE-2024-4536、CVE-2024-45341.

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit d38db0054c)
2025-03-11 14:29:20 +08:00
liujian
b34b7ea1fe fix: fix cve for telemetry and kubesphere (#6352)
fix: cve

Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
(cherry picked from commit b4069c6b3d)
2025-03-11 14:27:52 +08:00
Wenhao Zhou
2dbe296a06 [application] add sortBy parameter versionName (#6333)
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
(cherry picked from commit 7ce92c801a)
2025-03-11 14:26:34 +08:00
smartcat999
942d3be9d4 Fix workspacerole sync condition (#2142)
* fix: Fixed the issue that role and rolebinding do not trigger synchronization when binding a workspace to a cluster

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update workspace sync condition && update list options

Signed-off-by: peng wu <2030047311@qq.com>

* fix: rename enqueue request map func for workspacerole and workspacerolebinding

Signed-off-by: peng wu <2030047311@qq.com>

* fix: workspace role sync logic

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit bc128dcf78)
2025-03-11 14:26:04 +08:00
hongming
114f5a6e79 fix: the problem of conflicting controller output logs caused by duplicate initialization of roles and workspace roles when the controller is started (#2139)
Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 3d40b1905d)
2025-03-11 14:25:49 +08:00
hongming
c998029cd6 fix workspace role name exceeding the length limit (#2132)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 7a3a99cecb)
2025-03-11 14:25:10 +08:00
hongming
5613dc849c clean up unnecessary warning logs (#6323)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 255e9a228d)
2025-03-11 14:25:00 +08:00
KubeSphere CI Bot
659fe1e3cb fix helm executor serviceaccount not created (#1948)
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 6274978709)
2025-03-11 14:24:05 +08:00
hongming
b1a887fbb4 Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit fa7c1340e3)
2025-03-11 14:22:21 +08:00
liujian
4583b5a62e feat: create extensionVersions by depth (#6286)
* feat: create extensionVersions by depth

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

---------

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 9c962d3cbf)
2025-03-11 14:21:28 +08:00