admin/kubesphere
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,219 Commits 13 Branches 51 Tags
08fbb602a031e3378d2f3d14bd387917e5b809d8
Commit Graph

3219 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
KubeSphere CI Bot
08fbb602a0 Merge pull request #6451 from wansir/release-4.1 
Update branch to latest state
 2025-03-19 14:24:59 +08:00
hongming
90a3b62e79 chore: update license header 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 14:18:09 +08:00
hongming
6da63b8ce5 chore: update ks-core helm chart 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 14:05:17 +08:00
hongming
0bd5ba16fe chore: generate crds 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 13:43:19 +08:00
hongming
8f5f603289 update application controllers log level 
* [application] update application controllers log level

* update

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 13:37:12 +08:00
KubeSphere CI Bot
20bf33dfe1 fix: alias query not functioning (#2203) 
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:33:16 +08:00
KubeSphere CI Bot
3c2197df02 adjust the authorization rules for authenticated users (#2182) 
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:32:15 +08:00
hongming
2608892248 feat: add resource protection webhook (#2168) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:31:33 +08:00
smartcat999
760351d509 fix: update console permission with ks service account (#2135) 
* fix: update console permission with ks service account

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update restart pod's annotation

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update restart pod condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: service account pod restart condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: service account pod restart condition

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:29:29 +08:00
hongming
c8e9ec83de chore: refine ks-core helm chart (#2128) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:27:57 +08:00
hongming
0a75abc32c security: restrict anonymous access to the /kapis/version endpoint (#2107) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 12:06:43 +08:00
hongming
a819b24d53 fix the x509 certificate error (#2092) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:46:38 +08:00
hongming
fd4fbfa5a7 update helm chart 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:45:46 +08:00
hongming
d52e847370 feat: support service account token auth mode 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:40:42 +08:00
smartcat999
c8bab29a6b fix: update annotations with user's idap labels (#2042) 2025-03-19 11:33:32 +08:00
smartcat999
5ae94c9a0c fix: the problem of unauthorized access in the namespace-manage-serviceaccount permission template of the Operator role under the namespace (#1991) 2025-03-19 11:31:52 +08:00
inksnw
c76f88ee62 fix typo (#1981) 2025-03-19 11:30:55 +08:00
hongming
92c004ada0 Support deleting repo and apps in repo (#1979) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:30:10 +08:00
KubeSphere CI Bot
42ef42ef12 fix serviceaccount controller remove unnecessary retries (#2188) 
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:29:21 +08:00
KubeSphere CI Bot
8286d4888e fix: sa binds rbac role (#2187) 
* fix: sa binds rbac role

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* fix ut test

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* make goimports

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:28:36 +08:00
KubeSphere CI Bot
834c393cf0 add application release validatingWebhook (#2170) 
* add application release validatingWebhook

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* enable at host cluster

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:24:02 +08:00
Wenhao Zhou
9f6f781a39 Update appversion finalizer name (#2161) 
* update appversion finalizer name

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

* Update pkg/controller/application/appversion_contrlller.go

* Update pkg/controller/application/appversion_contrlller.go

* Update staging/src/kubesphere.io/api/application/v2/constants.go

* Update staging/src/kubesphere.io/api/application/v2/constants.go

---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
 2025-03-19 11:23:06 +08:00
KubeSphere CI Bot
96f85d4500 Allow version comparison errors (#2015) 
Co-authored-by: inksnw <inksnw@gmail.com>
 2025-03-19 11:18:02 +08:00
yonghongshi
128e7da6f3 fix csidriver check (#1993) 
Signed-off-by: stoneshi-yunify <stoneshi@kubesphere.io>
 2025-03-19 11:15:26 +08:00
hongming
fa2c4672ea update pod status.Phase (#6448) 
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: KubeSphere CI Bot <47586280+ks-ci-bot@users.noreply.github.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
 2025-03-19 11:01:57 +08:00
hongming
d2a591ac75 feat: add imagesearch provider (#6447) 
* feat: add imagesearch provider



* update



* update



* update



* update url and queries



* add func getProviderTypeByHost



---------

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: KubeSphere CI Bot <47586280+ks-ci-bot@users.noreply.github.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
 2025-03-19 10:47:58 +08:00
hongming
8fa36615e1 chore: simplify telemetry config (#6441) 
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-17 10:55:56 +08:00
hongming
12dec1558f deps: update go-jose to v4.0.5 (#6435) (#6438) 
(cherry picked from commit d14884cb6d)

Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-14 17:46:52 +08:00
KubeSphere CI Bot
58b811ee92 fix: regression bugs (#6433) 
fix: extension delete logic

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
 2025-03-14 14:25:51 +08:00
KubeSphere CI Bot
9d88c8d3a7 [release-4.1] Update util.go (#6424) 
Update util.go

Signed-off-by: liujian <54946465+redscholar@users.noreply.github.com>
Co-authored-by: liujian <54946465+redscholar@users.noreply.github.com>
 2025-03-12 18:44:49 +08:00
smartcat999
844b04613d fix: helm template error (#6419) 
Signed-off-by: peng wu <2030047311@qq.com>
 2025-03-11 17:57:49 +08:00
hongming
7da8954488 Merge pull request #6417 from wansir/release-4.1 
Merge master into branch release-4.1
 2025-03-11 14:49:59 +08:00
KubeSphere CI Bot
f96e76ef2a [kse-2286] replace storeCAFile use WithTLSConfig (#6400) 
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
(cherry picked from commit afe1372bc3)
 2025-03-11 14:36:00 +08:00
KubeSphere CI Bot
1b479a9084 [kse-2112] add extension version controller (#6399) 
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>

(cherry picked from commit 0556934ecc)
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-11 14:35:20 +08:00
smartcat999
f1bb9d69ac fix: Fixed the issue where the user status was empty when the third-p… (#6379) 
fix: Fixed the issue where the user status was empty when the third-p… (#2258)

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit 8056d176f8)
 2025-03-11 14:32:29 +08:00
smartcat999
e7c97d3a56 Fix dependency cves (#6353) 
* Upgraded golang.org/x/crypto v0.28.0 => v0.31.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded golang.org/x/net v0.30.0 => v0.33.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/golang/glog v1.2.2 => v1.2.4. Fix CVE-2024-45339.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgrade go stdlib from 1.22.8 to 1.22.11. Fix CVE-2024-45336.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/go-git/go-git/v5 v5.11.0 => v5.13.0. Fix CVE-2025-21613、CVE-2025-21614.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded telemetry v1.0.1 => v1.0.2. Fix CVE-2024-45338、CVE-2024-34156、CVE-2024-34155、CVE-2024-34158、CVE-2024-4536、CVE-2024-45341.

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit d38db0054c)
 2025-03-11 14:29:20 +08:00
liujian
b34b7ea1fe fix: fix cve for telemetry and kubesphere (#6352) 
fix: cve

Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
(cherry picked from commit b4069c6b3d)
 2025-03-11 14:27:52 +08:00
Wenhao Zhou
2dbe296a06 [application] add sortBy parameter versionName (#6333) 
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
(cherry picked from commit 7ce92c801a)
 2025-03-11 14:26:34 +08:00
smartcat999
942d3be9d4 Fix workspacerole sync condition (#2142) 
* fix: Fixed the issue that role and rolebinding do not trigger synchronization when binding a workspace to a cluster

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update workspace sync condition && update list options

Signed-off-by: peng wu <2030047311@qq.com>

* fix: rename enqueue request map func for workspacerole and workspacerolebinding

Signed-off-by: peng wu <2030047311@qq.com>

* fix: workspace role sync logic

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit bc128dcf78)
 2025-03-11 14:26:04 +08:00
hongming
114f5a6e79 fix: the problem of conflicting controller output logs caused by duplicate initialization of roles and workspace roles when the controller is started (#2139) 
Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 3d40b1905d)
 2025-03-11 14:25:49 +08:00
hongming
c998029cd6 fix workspace role name exceeding the length limit (#2132) 
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 7a3a99cecb)
 2025-03-11 14:25:10 +08:00
hongming
5613dc849c clean up unnecessary warning logs (#6323) 
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 255e9a228d)
 2025-03-11 14:25:00 +08:00
KubeSphere CI Bot
659fe1e3cb fix helm executor serviceaccount not created (#1948) 
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 6274978709)
 2025-03-11 14:24:05 +08:00
hongming
b1a887fbb4 Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290) 
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit fa7c1340e3)
 2025-03-11 14:22:21 +08:00
liujian
4583b5a62e feat: create extensionVersions by depth (#6286) 
* feat: create extensionVersions by depth

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

---------

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 9c962d3cbf)
 2025-03-11 14:21:28 +08:00
inksnw
3b315a087d update workloadtemplates RoleTemplate (#6285) 
(cherry picked from commit 637950c979)
 2025-03-11 14:20:51 +08:00
hongming
39eab5ee5c update dependencies (#6267) 
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit cfebd96a1f)
 2025-03-11 14:19:32 +08:00
Wenhao Zhou
742c1e52db feat: support listing cluster that user has the cluster`s rolebinding (#6259) 
(cherry picked from commit c5e2800ab2)
 2025-03-11 14:14:13 +08:00
Xinzhao Xu
64e054bde2 fix: cache checking always evaluates to true 
(cherry picked from commit 6205e44817)
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-11 14:13:57 +08:00
Wenhao Zhou
93369941e8 enhancement: disable redis when running as member cluster 
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

(cherry picked from commit 4fa4f5b42d)
Signed-off-by: hongming <coder.scala@gmail.com>
 2025-03-11 14:10:40 +08:00