Commit Graph

3181 Commits

Author SHA1 Message Date
smartcat999
942d3be9d4 Fix workspacerole sync condition (#2142)
* fix: Fixed the issue that role and rolebinding do not trigger synchronization when binding a workspace to a cluster

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update workspace sync condition && update list options

Signed-off-by: peng wu <2030047311@qq.com>

* fix: rename enqueue request map func for workspacerole and workspacerolebinding

Signed-off-by: peng wu <2030047311@qq.com>

* fix: workspace role sync logic

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit bc128dcf78)
2025-03-11 14:26:04 +08:00
hongming
114f5a6e79 fix: the problem of conflicting controller output logs caused by duplicate initialization of roles and workspace roles when the controller is started (#2139)
Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 3d40b1905d)
2025-03-11 14:25:49 +08:00
hongming
c998029cd6 fix workspace role name exceeding the length limit (#2132)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 7a3a99cecb)
2025-03-11 14:25:10 +08:00
hongming
5613dc849c clean up unnecessary warning logs (#6323)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 255e9a228d)
2025-03-11 14:25:00 +08:00
KubeSphere CI Bot
659fe1e3cb fix helm executor serviceaccount not created (#1948)
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 6274978709)
2025-03-11 14:24:05 +08:00
hongming
b1a887fbb4 Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit fa7c1340e3)
2025-03-11 14:22:21 +08:00
liujian
4583b5a62e feat: create extensionVersions by depth (#6286)
* feat: create extensionVersions by depth

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

---------

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 9c962d3cbf)
2025-03-11 14:21:28 +08:00
inksnw
3b315a087d update workloadtemplates RoleTemplate (#6285)
(cherry picked from commit 637950c979)
2025-03-11 14:20:51 +08:00
hongming
39eab5ee5c update dependencies (#6267)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit cfebd96a1f)
2025-03-11 14:19:32 +08:00
Wenhao Zhou
742c1e52db feat: support listing cluster that user has the cluster`s rolebinding (#6259)
(cherry picked from commit c5e2800ab2)
2025-03-11 14:14:13 +08:00
Xinzhao Xu
64e054bde2 fix: cache checking always evaluates to true
(cherry picked from commit 6205e44817)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:13:57 +08:00
Wenhao Zhou
93369941e8 enhancement: disable redis when running as member cluster
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

(cherry picked from commit 4fa4f5b42d)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:10:40 +08:00
hongming
168bb43cb1 chore: add helm release namespace check (#6315)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 65eb534ed9)
2025-03-11 14:05:36 +08:00
Xinzhao Xu
811cc0290e Support for configuring affinity for helm executor (#1989)
(cherry picked from commit e389253a4e)
2025-03-11 14:05:09 +08:00
hongming
0cf715a89a fix: unexpected HTTP status code (#6241)
fix: Update member cluster mirror service verification response infor… (#1992)

* fix: repository verify error

* Update pkg/kapis/resources/v1alpha3/handler.go

---------

Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
(cherry picked from commit 7992b75072)
2025-03-11 13:58:21 +08:00
KubeSphere CI Bot
c75dc7969e [release-4.1] fix: update license-eye version to v0.6.0 (#6415)
fix: update license-eye version to v0.6.0

Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-03-11 11:44:48 +08:00
KubeSphere CI Bot
bb60d39434 Support manual triggering of a repository update. (#6414)
* Support manual triggering of a repository update.

* cherry pick add api for workload template (#1982)

* cherry pick (add operator application (#1970))

* Modify routing implementation to improve readability

* cherry pick from kse dfc40e5adf5aa2e67d1

* Filter by Routing Parameter Namespace (#1990)

* add doc for workloadtemplates

---------

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:36:02 +08:00
KubeSphere CI Bot
c9c856dfda Fix conflict and cherry-pick (cherry-pick from #0e8c6d5) (#6413)
Fix conflict and cherry-pick (cherry-pick from #0e8c6d5)

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:22:58 +08:00
KubeSphere CI Bot
bb4c67f624 Refactor FormatVersion function to handle invalid characters (#6411)
* Refactor FormatVersion function to handle invalid characters

* Use SHA1 instead of MD5

---------

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:14:48 +08:00
KubeSphere CI Bot
3976d959b4 [release-4.1] Improve the readability of some codes (#6410)
Improve the readability of some codes

Co-authored-by: sologgfun <857949825@qq.com>
2025-03-11 11:06:48 +08:00
smartcat999
23e7e6d179 update ks-core helm chart (#6401) (#6407)
fix: cherrypick update ks-core helm chart



(cherry picked from commit 7e2cafd15b)

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-11 10:41:48 +08:00
KubeSphere CI Bot
81c74f28d4 fix: incorrect redis config (#6405)
fix: incorrect redis config (#2130)

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-11 10:25:48 +08:00
KubeSphere CI Bot
e48875411d fix: replace user displayname with annotation (#6396)
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-06 18:04:43 +08:00
smartcat999
c0bf77e541 feat: platform config API (#6391)
feat: platform config API (#2052) (#6303)



(cherry picked from commit c1259aff8b)

Signed-off-by: hongming <coder.scala@gmail.com>
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: hongming <hongming@kubesphere.io>
2025-03-05 11:09:41 +08:00
smartcat999
db7a21e754 feature: reduce telemetry dependence (#6390)
feature: reduce telemetry dependence. (#6276)

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-05 10:34:42 +08:00
KubeSphere CI Bot
ddddbbe500 [release-4.1] fix ldaps protocol (#6388)
fix: ldap default protocol (#2156)

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
2025-03-03 16:38:39 +08:00
KubeSphere CI Bot
c90729682f feat(auth): support multiple identity provider associations (#6381)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-03 16:28:39 +08:00
KubeSphere CI Bot
33152139d6 fix: During the creation of a workspace, it will be determined whethe… (#6387)
fix: During the creation of a workspace, it will be determined whethe… (#2147)

* fix: During the creation of a workspace, it will be determined whether the user has the authority to designate other users as administrators.



* fix: code update



* fix: Determine whether the user is a workspace administrator based on whether the user has the permission to delete the workspace



---------

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
2025-03-03 16:22:39 +08:00
KubeSphere CI Bot
2ed005f1b1 fix: support LDAPS && STARTTLS (#6386)
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-03 16:05:39 +08:00
KubeSphere CI Bot
c9623f674c feat: add category for deepseek (#6383)
Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-02-28 17:08:37 +08:00
KubeSphere CI Bot
38fb2d0514 [release-4.1] fix: pod list with owner filter logic (#6371)
fix: pod list with owner filter logic

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-02-21 15:06:27 +08:00
smartcat999
1952b98ca8 fix cve with upgrade telemetry 1.0.2 and go 1.22.11 (#6367)
Signed-off-by: peng wu <2030047311@qq.com>
2025-02-14 11:21:19 +08:00
KubeSphere CI Bot
739701fa91 [release-4.1] Fix OIDC logout redirect uri (#6351)
* fix: oidc logout redirect uri

Signed-off-by: peng wu <2030047311@qq.com>

* fix: oidc unittest

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-02-08 10:11:13 +08:00
KubeSphere CI Bot
f89c55c484 [release-4.1] adjust the authorization rules for workspace roles (#6331)
adjust the authorization rules for workspace roles

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-01-07 09:39:25 +08:00
KubeSphere CI Bot
d2f811b1a1 [release-4.1] fix: make the prerelease version compatible (#6301)
fix: make the prerelease version compatible

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
2024-12-03 15:39:44 +08:00
KubeSphere CI Bot
b252832d20 [release-4.1] fix: resolve the apprelease upgrade issue (#6278)
* Update executor.go

Signed-off-by: 凌波 <lingbo@lingbohome.com>

* fix: apprelease upgrade

Signed-off-by: lingbo <lingbo@lingbohome.com>

* upgrade job on success, clean up apprelease status.message

Signed-off-by: lingbo <lingbo@lingbohome.com>

* adjust apprelease status.message

Signed-off-by: lingbo <lingbo@lingbohome.com>

* optimize: streamline apprelease upgrade logic

Signed-off-by: lingbo <lingbo@lingbohome.com>

* adjust upgrade code

Signed-off-by: lingbo <lingbo@lingbohome.com>

* Adding status.message during apprelease installations and upgrades

Signed-off-by: lingbo <lingbo@lingbohome.com>

* fix: Supplement the missing status in the apprelease life cycle.Message, solve the problem that the front-end status and message tips display do not match.

Signed-off-by: lingbo <lingbo@lingbohome.com>

---------

Signed-off-by: 凌波 <lingbo@lingbohome.com>
Signed-off-by: lingbo <lingbo@lingbohome.com>
Co-authored-by: 凌波 <lingbo@lingbohome.com>
2024-11-18 17:28:28 +08:00
KubeSphere CI Bot
e33f9125c3 [release-4.1] fix regression bug (#6270)
fix regression bug

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-11-06 15:43:14 +08:00
KubeSphere CI Bot
d6ff99e5a2 [release-4.1] fix: there is a serious privilege escalation vulnerability in the kubectl terminal tool (#6254)
fix: there is a serious privilege escalation vulnerability in the kubectl terminal tool

Signed-off-by: lingbo <lingbo@lingbohome.com>
Co-authored-by: lingbo <lingbo@lingbohome.com>
2024-10-31 11:42:07 +08:00
KubeSphere CI Bot
286282e3a8 [release-4.1] fix failing unit tests (#6256)
fix failing unit tests

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-10-31 10:46:07 +08:00
KubeSphere CI Bot
b17c2dff2b [release-4.1] correct and clarify potentially misleading terms in the license file (#6252)
correct and clarify potentially misleading terms in the license file

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-10-31 09:42:07 +08:00
KubeSphere CI Bot
c297e6ab99 [release-4.1] refactor: workspace cascading deletion logic (#6251)
refactor: workspace cascading deletion logic

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-10-30 17:49:06 +08:00
KubeSphere CI Bot
abcd94fa4f [release-4.1] disable extensions-museum in member cluster (#6239)
disable extensions-museum in member cluster

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-10-25 18:34:50 +08:00
hongming
253e2a5c33 Update Chart.yaml (#6230) helm-chart-1.1.3 2024-10-18 14:36:42 +08:00
KubeSphere CI Bot
3798bcd452 [release-4.1] config/ks-core: fix the CronJob API version determination issue (#6229)
config/ks-core: fix the CronJob API version determination issue

Co-authored-by: Xinzhao Xu <z2d@jifangcheng.com>
2024-10-18 14:23:42 +08:00
hongming
4efc7c9fbe Update build-multiarch.yaml (#6213)
Signed-off-by: hongming <hongming@kubesphere.io>
v4.1.2
2024-09-26 21:41:47 +08:00
hongming
3abf00b7c1 Release v4.1.2 (#6212)
Signed-off-by: hongming <coder.scala@gmail.com>
helm-chart-1.1.2
2024-09-26 21:02:26 +08:00
hongming
31ee299312 Update sync-helm-chart.yaml
Signed-off-by: hongming <hongming@kubesphere.io>
2024-09-26 18:16:01 +08:00
KubeSphere CI Bot
3187fcc173 [release-4.1] fix: remove the incorrect RBAC rule merging logic (#6210)
fix: remove the incorrect RBAC rule merging logic

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-09-26 16:18:17 +08:00
KubeSphere CI Bot
f0ab0b9856 [release-4.1] adjust the log level of unexpected exceptions (#6208)
adjust the log level of unexpected exceptions

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-09-26 11:58:17 +08:00
KubeSphere CI Bot
7e703750e8 [release-4.1] feat: Adapt to oci-based helmchart repo (#6203)
* add oci client for registry

* add LoadRepoIndexFormOci

* feat: Adapt to oci-based helmchart repo

* Update the golang base image version in the dockerfile

* update oci_test.go

Signed-off-by: lingbo <lingbo@lingbohome.com>

* fix: Update oci_test.go

Signed-off-by: 凌波 <lingbo@lingbohome.com>

* Update go imports

---------

Signed-off-by: lingbo <lingbo@lingbohome.com>
Signed-off-by: 凌波 <lingbo@lingbohome.com>
Co-authored-by: lingbo <lingbo@lingbohome.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-09-25 11:02:16 +08:00