Naeel
488157963a
layer1: bootstrap executor namespace manager
2026-04-26 10:35:50 +03:00
Naeel
804bc533db
layer1: bootstrap router namespace manager
2026-04-26 10:35:29 +03:00
Naeel
65837610a1
layer1: bootstrap builder namespace manager
2026-04-26 10:35:09 +03:00
Naeel
dd7470922c
layer1: hook executor watcher to namespace manager
2026-04-26 10:34:34 +03:00
Naeel
0135a93a30
layer1: hook router watcher to namespace manager
2026-04-26 10:34:04 +03:00
Naeel
b12a8e5e75
layer1: hook builder watcher to namespace manager
2026-04-26 10:33:36 +03:00
Naeel
ad0f83fd4b
layer1: add namespace bootstrap dispatch step 26
2026-04-26 10:32:43 +03:00
Naeel
6f77fa5a9a
layer1: add executor namespace subscriber step 25
2026-04-26 10:31:54 +03:00
Naeel
331f531962
layer1: factor executor namespace registration step 24
2026-04-26 10:30:59 +03:00
Naeel
346399d35f
layer1: align router watcher flow step 23
2026-04-26 10:29:43 +03:00
Naeel
33a08f00b3
layer1: fix router namespace subscriber syntax
2026-04-26 10:29:19 +03:00
Naeel
2971029c42
layer1: add router namespace subscriber step 22
2026-04-26 10:28:57 +03:00
Naeel
3159fba65b
layer1: align builder watcher flow step 21
2026-04-26 10:27:09 +03:00
Naeel
b200b8bb5b
layer1: fix builder namespace subscriber syntax
2026-04-26 10:26:40 +03:00
Naeel
126f7cc51c
layer1: add builder namespace subscriber step 20
2026-04-26 10:26:13 +03:00
Naeel
bcf34d6b1a
layer1: add namespace subscriber adapter step 19
2026-04-26 10:24:01 +03:00
Naeel
022960ade7
layer1: add namespace event bridge step 18
2026-04-26 10:23:21 +03:00
Naeel
b1e2e6462d
layer1: add namespace dispatch step 17
2026-04-26 10:22:35 +03:00
Naeel
ae8275d0a7
layer1: add namespace lifecycle subscribers step 16
2026-04-26 10:21:26 +03:00
Naeel
2857398e11
layer1: checkpoint pending utils changes
2026-04-26 10:20:56 +03:00
Naeel
834c0de941
layer1: add namespace event helpers step 15
2026-04-26 10:05:51 +03:00
Naeel
db4499d8c7
layer1: add namespace part helpers step 14
2026-04-26 10:05:12 +03:00
Naeel
b3f99b2b6c
layer1: centralize managed namespace labels step 13
2026-04-26 10:04:18 +03:00
Naeel
5e5058ba0e
layer1: add namespace manager bridge step 12
2026-04-26 10:03:09 +03:00
Naeel
42acce308f
layer1: add namespace bootstrap step 11
2026-04-26 10:02:37 +03:00
Naeel
66a3dc2a3c
layer1: derive namespace phases step 10
2026-04-26 10:02:03 +03:00
Naeel
910f65b6d4
layer1: add namespace manager subscribers step 9
2026-04-26 10:01:21 +03:00
Naeel
114d5b99af
layer1: add namespace manager skeleton step 8
2026-04-26 10:00:45 +03:00
Naeel
ac2638f17d
layer1: add namespace manager model step 7
2026-04-26 09:54:23 +03:00
Naeel
97b13a13c2
doc: add namespace manager target design
2026-04-26 09:53:06 +03:00
Naeel
1f53bc1fb7
doc: add detailed namespace rewrite logic
2026-04-26 09:50:06 +03:00
Naeel
87477d4529
layer1: guard router informer maps step 6
2026-04-26 09:37:09 +03:00
Naeel
94f26b69ee
layer1: fix newdeploy namespace parity step 5
2026-04-26 09:35:39 +03:00
Naeel
56a499a59f
layer1: fix buildermgr namespace dedup step 4
2026-04-26 09:34:46 +03:00
Naeel
6102b277c8
layer1: migrate runtime loops to snapshots step 3
2026-04-26 09:33:36 +03:00
Naeel
9ce9829f3b
layer1: fix sa namespace routing step 2
2026-04-26 09:32:08 +03:00
Naeel
c987fa07e8
layer1: add namespace snapshot api step 1
2026-04-26 09:30:51 +03:00
Naeel
27a280bc03
doc: record debugging comparison notes
2026-04-26 09:11:18 +03:00
Naeel
e2dff8db09
doc: add detailed layer1 multi-tenant fix report
2026-04-26 09:06:44 +03:00
Naeel
7faaa9dc1f
rbac: allow router namespace watch in multi-tenant mode
2026-04-26 09:03:15 +03:00
Naeel
f617913ad9
rbac: allow full fetcher role provisioning in dynamic namespaces
2026-04-26 08:59:02 +03:00
Naeel
8ccc9fb342
rbac: add fission-executor-sa-provisioner for SA/Role/RoleBinding creation in user NS
...
Fixes EnsureNamespaceSA getting 403 Forbidden when provisioning fission-fetcher
SA in dynamically registered namespaces. Adds ClusterRole + ClusterRoleBinding
with create/update/patch for serviceaccounts, roles, rolebindings.
Also adds doc/progress.md and doc/thinking/2026-04-26-rbac-fix.md.
2026-04-26 07:46:33 +03:00
Naeel
161de70576
multi-tenant: EnsureNamespaceSA + ns_watcher SA provisioning (v8)
2026-04-26 07:41:46 +03:00
82e1ff76a5
Add npm dependabot rules ( #3293 )
...
* Add npm dependabot rules
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Update .github/dependabot.yml
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-16 10:33:52 +05:30
Sanket Sudake and GitHub
e7cfb06afa
Update dependabot.yml for formatting and ignore rules ( #3292 )
...
* Update dependabot.yml for formatting and ignore rules
Adjusted formatting and added ignore rules for dependencies in test directories.
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Fix dependabot file
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* code cleanup
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* All paths under test ignore
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* more fix
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-12-15 13:30:10 +05:30
Sanket Sudake and GitHub
d9d9d226d3
Chart version update ( #3291 )
...
* Helm K8s minimum version to 1.28
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Workflow image changes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Update tools version
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-12-15 12:04:14 +05:30
bcd1872ffa
Bump github.com/opencontainers/runc ( #3275 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/opencontainers/runc](https://github.com/opencontainers/runc ).
Updates `github.com/opencontainers/runc` from 1.2.3 to 1.2.8
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.2.8/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.2.3...v1.2.8 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-version: 1.2.8
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sanket Sudake <sanketsudake@gmail.com >
2025-12-15 10:22:27 +05:30
0bd3a5957b
Bump k8s.io/apiextensions-apiserver in the go-dependencies group ( #3288 )
...
Bumps the go-dependencies group with 1 update: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ).
Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 09:51:10 +05:30
a450dfebc7
Bump the docker-images group across 5 directories with 1 update ( #3289 )
...
Bumps the docker-images group with 1 update in the /cmd/builder directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fetcher directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fission-bundle directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/preupgradechecks directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/reporter directory: [chainguard/static](https://github.com/chainguard-images/images ).
Updates `chainguard/static` from `d44809c` to `a301031`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `d44809c` to `a301031`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `d44809c` to `a301031`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `d44809c` to `a301031`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `d44809c` to `a301031`
- [Commits](https://github.com/chainguard-images/images/commits )
---
updated-dependencies:
- dependency-name: chainguard/static
dependency-version: latest
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-version: latest
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-version: latest
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-version: latest
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-version: latest
dependency-type: direct:production
dependency-group: docker-images
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 09:50:13 +05:30
5f90095470
Bump the github-actions group with 7 updates ( #3290 )
...
Bumps the github-actions group with 7 updates:
| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner ) | `2.13.2` | `2.14.0` |
| [actions/checkout](https://github.com/actions/checkout ) | `6.0.0` | `6.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `4.31.5` | `4.31.8` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) | `9.1.0` | `9.2.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action ) | `5.5.1` | `5.5.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `5.0.0` | `6.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action ) | `0.20.10` | `0.20.11` |
Updates `step-security/harden-runner` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/95d9a5deda9de15063e7595e9719c11c38c90ae2...20cf305ff2072d973412fa9b1e3a4f227bda3c76 )
Updates `actions/checkout` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8 )
Updates `github/codeql-action` from 4.31.5 to 4.31.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/fdbfb4d2750291e159f0156def62b853c2798ca2...1b168cd39490f61582a9beae412bb7057a6b2c4e )
Updates `golangci/golangci-lint-action` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/e7fa5ac41e1cf5b7d48e45e42232ce7ada589601...1e7e51e771db61008b38414a730f564565cf7c20 )
Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/5a1091511ad55cbe89839c7260b706298ca349f7...671740ac38dd9b0130fbe1cec585b89eea48d3de )
Updates `actions/upload-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f )
Updates `anchore/sbom-action` from 0.20.10 to 0.20.11
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](https://github.com/anchore/sbom-action/compare/fbfd9c6c189226748411491745178e0c2017392d...43a17d6e7add2b5535efe4dcae9952337c479a93 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-version: 4.31.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
dependency-version: 9.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: codecov/codecov-action
dependency-version: 5.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: anchore/sbom-action
dependency-version: 0.20.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 09:49:37 +05:30
Naeel