This is an automated email from the ASF dual-hosted git repository.
sciabarracom pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/openserverless-operator.git
The following commit(s) were added to refs/heads/main by this push:
new 149fad4 0.9.0 (#130)
149fad4 is described below
commit 149fad473ec72f839c8af004165b47019f2fb437
Author: Michele Sciabarra <[email protected]>
AuthorDate: Tue Sep 8 09:30:26 2026 +0200
0.9.0 (#130)
* fix: fix absolute path in run.sh
starting the operator locally gave error "No such file or directory task:
Failed to run task "run": task: Failed to run task "d:run": exit status 127",
because of an absolute path inside run.sh
* fix: path to check for db ready
changed the path for wait_db_ready. The path without the final / led to a
301 and not a 200
* fix: invoker and operator image from env
removed hardcoded values for cfg.get operator.image / operator.tag and
invoker.image and invoker.tag. Config now check env vars and defaults to old
images
* fix(test): milvus tests
fixed tests for minio / seaweedfs .
* chore(docs): taskfile
added desc to taskfile tasks
* fix: namespace validation
added namespace validation in user creation
* do not use a fixed offset to nuvolaris.io (#119)
* do not use a fixed offset to nuvolaris.io
* removed talos
---------
Co-authored-by: Trustable User <[email protected]>
* remove reference to nuvolaris logo (#120)
Co-authored-by: Trustable User <[email protected]>
* fix: validate database and bucket names in user provisioning (#121)
Follow-up to #109, which validated spec.namespace but left two other
tenant controlled WhiskUser fields flowing unsanitized into shell
commands executed inside the data pods via kubectl exec.
* spec.postgres.database reached `bash -c "... psql --dbname {db_name}"`
in exec_psql_command_in_db. Unlike the namespace field it never
becomes a filename, so it was not even constrained to path safe
characters.
* spec.object-storage.{data,route}.bucket reached
`sh -c "echo '{command}' | weed shell"` in the seaweedfs client,
where a quote breaks out of the single quoted string.
Adds util.validate_database_name and util.validate_bucket_name next to
the existing validate_namespace and applies them at the call sites and
at the shell sinks, plus matching CEL rules on the CRD so the API server
rejects the payload before the operator sees it. The regexes and the CEL
rules were cross checked to accept exactly the same inputs.
Also:
* guards the latent render_kvrocks_script / exec_kvrocks_command pair,
which repeats the same pattern but is not currently wired into the
user path
* makes validate_namespace return False for non string input instead of
raising TypeError
* corrects a copy pasted error message referring to exec_mongosh_command
inside exec_psql_command
Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
* rebranding (#122)
Co-authored-by: Michele Sciabarra <[email protected]>
* update naming
* operator build updated
* 0.9.0 (#124)
* updating distro in dockerfile
---------
Co-authored-by: Bruno Salzano <[email protected]>
Co-authored-by: Trustable User <[email protected]>
Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
Co-authored-by: Michele Sciabarra <[email protected]>
Co-authored-by: miki3421 <[email protected]>
