This is an automated email from the ASF dual-hosted git repository.
sciabarracom pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/openserverless-operator.git
from 4cab811 chore(deps): bump idna from 3.10 to 3.15 (#100)
add 8c48a16 fix: fix absolute path in run.sh
add df3cb4b fix: path to check for db ready
add 506e4bc fix: invoker and operator image from env
add 7337d43 Merge pull request #105 from d4rkstar/0.9.0
add 6728fe8 fix(test): milvus tests
add 7403d5c chore(docs): taskfile
add a21591d Merge pull request #107 from d4rkstar/0.9.0
add 6621e93 fix: namespace validation
add 424ca16 Merge pull request #109 from d4rkstar/0.9.0
add c28d8f6 do not use a fixed offset to nuvolaris.io (#119)
add 579fddb remove reference to nuvolaris logo (#120)
add 6b99ae8 fix: validate database and bucket names in user provisioning
(#121)
add 4710c01 rebranding (#122)
add 82662a9 update naming
add 925898a operator build updated
add 3c41379 Merge pull request #123 from sciabarracom/0.9.0
add f7a56ef 0.9.0 (#124)
add 37b105f Merge branch 'main' into 0.9.0
add b90faa7 updating distro in dockerfile
add 9a74639 Merge branch 'main' into 0.9.0
add 5df76fe changed the default index.html
add 3496915 fixing image_tag behaviour
add 7d7031b removed mc from build
add aeadc69 fix the kind version
add 022af91 license, notice and headers
add c4f811e addedd license in jinja2 comments -a
add 5095b2f Merge remote-tracking branch 'origin/main' into 0.9.0
add d5a230b Removal of MinIO server, integrated SEAWEEDFS management
add ade386a Merge remote-tracking branch 'franz/issue/ops-252' into 0.9.0
add 96138ab removed mongodb remnants
add 8e37b34 removed removal.md
add 6fc92c5 fixed docker file for extra compomnents
add 5d509e3 updated LICENSE
add e159b09 Restrict anonymous S3 access to web buckets on 0.9.0 (#139)
add 92b31bd Restrict CouchDB user metadata access on 0.9.0 (#138)
add a340bdd Fix RC7 operator image build and Alertmanager defaults (#137)
add 3ee0a79 update sha
add 68b8497 Restrict Redis tenant ACLs while preserving Lua on 0.9.0
(#140)
add e26b21b Isolate etcd and Milvus credentials and management endpoints
on 0.9.0 (#141)
add 245032c Isolate Kafka and ZooKeeper from tenant action pods on 0.9.0
(#145)
add 14e7a30 fix: isolate malformed cron annotations between tenants (#144)
add bd24b2b Fix FerretDB tenant provisioning on 0.9.0 (#142)
add 8d71e8e Exclude all branch names from image publication workflow
(#148)
add 4919450 Remove inaccurate Gradle attribution from operator licensing
(#147)
add a7e7df6 Merge branch 'main' into 0.9.0
new fb481d2 Merge pull request #149 from apache/0.9.0
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.env.dist | 18 +
.github/cisetup.sh | 2 -
.github/workflows/check.yml | 40 +-
.github/workflows/image.yml | 12 +-
.gitignore | 1 +
.gitmodules | 0
.licenserc.yaml | 37 +-
Dockerfile | 15 +-
LICENSE | 498 ++--
MESSAGING_SECURITY.md | 94 +
NOTICE | 271 +-
OPERATOR.md | 14 +-
Taskfile.yml | 8 +-
TaskfileDev.yml | 5 -
TaskfileTest.yml | 46 +-
actions/Taskfile.yml | 72 +-
.../common/minio_util.py => common/s3_util.py} | 10 +-
actions/content/__main__.py | 18 +-
.../content/common/{minio_util.py => s3_util.py} | 10 +-
actions/devel/download/__main__.py | 6 +-
.../minio_util.py => download/common/s3_util.py} | 10 +-
.../ferretdb/common/s3_util.py} | 10 +-
actions/devel/minio/common/minio_util.py | 182 --
actions/devel/psql/common/minio_util.py | 182 --
.../minio_util.py => psql/common/s3_util.py} | 36 +-
actions/devel/redis/common/minio_util.py | 182 --
.../minio_util.py => redis/common/s3_util.py} | 36 +-
actions/devel/{minio => s3}/__main__.py | 6 +-
.../{minio/command/minio.py => s3/command/s3.py} | 42 +-
actions/devel/{minio => s3}/common/authorize.py | 0
actions/devel/{minio => s3}/common/command_data.py | 0
.../common/minio_util.py => s3/common/s3_util.py} | 36 +-
actions/devel/{minio => s3}/common/util.py | 0
actions/devel/{minio => s3}/flatdict.py | 0
.../devel/{minio => s3}/openserverless/config.py | 0
.../{minio => s3}/openserverless/couchdb_util.py | 0
actions/devel/upload/__main__.py | 4 +-
actions/devel/upload/common/minio_util.py | 182 --
.../minio_util.py => upload/common/s3_util.py} | 36 +-
actions/github/callback/__main__.py | 2 +-
actions/github/common/whisk_user_generator.py | 6 +-
actions/system.yml | 20 +-
.../devel/{minio_buckets.json => s3_buckets.json} | 0
demos/devel/{minio_cp.json => s3_cp.json} | 0
demos/devel/{minio_ls.json => s3_ls.json} | 0
demos/devel/{minio_mv.json => s3_mv.json} | 0
demos/devel/{minio_rm.json => s3_rm.json} | 0
demos/milvus/milvus_admin_test.py | 2 +-
deploy/content/index.html | 50 +-
deploy/demos/devel/minio_buckets.json | 3 -
deploy/demos/devel/minio_cp.json | 9 -
deploy/demos/devel/minio_ls.json | 6 -
deploy/demos/devel/minio_mv.json | 9 -
deploy/demos/devel/minio_rm.json | 7 -
deploy/demos/reference/milvus_manifest.yaml | 3073 --------------------
deploy/etcd/etcd-jwt-secret.yaml | 27 -
deploy/etcd/etcd-sts.yaml | 2 +-
deploy/kafka/kafka-001-sts.yaml | 4 +-
deploy/kafka/kafka-004-networkpolicy.yaml | 51 +
deploy/milvus-operator/README.md | 2 +-
deploy/milvus-slim/milvus-cfg-deps.yaml | 116 -
deploy/milvus-slim/milvus-cfg-slim-base.yaml | 9 +-
deploy/milvus-slim/milvus-s3-secret.yaml | 4 +-
deploy/milvus-slim/milvus-svc.yaml | 4 +-
deploy/milvus-slim/milvus.yaml | 5 +-
deploy/milvus/milvus-cfg-base.yaml | 11 +-
deploy/milvus/milvus-cfg-deps.yaml | 99 -
deploy/milvus/milvus-s3-secret.yaml | 4 +-
deploy/milvus/milvus-svc.yaml | 4 +-
deploy/milvus/milvus.yaml | 5 +-
deploy/minio/00-minio-pvc.yaml | 32 -
deploy/minio/01-minio-dep.yaml | 62 -
deploy/minio/02-minio-svc.yaml | 37 -
.../mongodb-auth-openserverless.yaml | 25 -
deploy/mongodb-operator-deploy/mongodb-auth.yaml | 25 -
deploy/mongodb-operator-deploy/mongodb-svc.yaml | 34 -
deploy/mongodb-operator-deploy/mongodb.yaml | 52 -
deploy/mongodb-operator/mongodb-crd.yaml | 451 ---
deploy/mongodb-operator/mongodb-operator.yaml | 92 -
deploy/mongodb-operator/mongodb-rbac.yaml | 123 -
deploy/mongodb-standalone/mongodb-auth.yaml | 25 -
deploy/mongodb-standalone/mongodb-cm.yaml | 34 -
deploy/mongodb-standalone/mongodb-pvc.yaml | 28 -
deploy/mongodb-standalone/mongodb-sts.yaml | 87 -
deploy/mongodb-standalone/mongodb-svc.yaml | 31 -
deploy/nginx-static/nginx-static-cm.yaml | 4 +-
deploy/nginx-static/nginx-static-sts.yaml | 4 +-
deploy/ngrok | 0
deploy/openserverless-operator/whisk.yaml | 2 -
.../openserverless-permissions/operator-roles.yaml | 5 +
deploy/openserverless-permissions/whisk-crd.yaml | 106 +-
.../openserverless-permissions/whisk-user-crd.yaml | 12 +-
deploy/qdrant/qdrant-cm.yaml | 47 -
deploy/qdrant/qdrant-sts.yaml | 141 -
deploy/qdrant/qdrant-svc.yaml | 78 -
deploy/s3ninja/s3ninja-set.yaml | 45 -
deploy/s3ninja/s3ninja-svc.yaml | 30 -
deploy/whisk-system/.gitkeep | 17 +
deploy/zookeeper/zookeeper-003-sts.yaml | 2 +
deploy/zookeeper/zookeeper-005-networkpolicy.yaml | 50 +
openserverless/actionexecutor.py | 17 +-
openserverless/bucket.py | 31 -
openserverless/config.py | 2 +-
openserverless/couchdb.py | 7 +-
openserverless/datastore_connection.py | 69 +
openserverless/datastore_security.py | 108 +
openserverless/enterprise_util.py | 2 +-
openserverless/etcd.py | 83 +-
openserverless/etcd_admin.py | 114 +
openserverless/ferretdb.py | 34 +-
openserverless/issuer.py | 2 +-
openserverless/kafka.py | 7 +-
openserverless/kopf_util.py | 10 -
openserverless/main.py | 30 +-
openserverless/messaging_security.py | 68 +
openserverless/milvus_operator.py | 2 -
openserverless/milvus_standalone.py | 83 +-
openserverless/minio_deploy.py | 303 --
openserverless/minio_ingress.py | 226 --
openserverless/minio_util.py | 179 --
openserverless/mongodb.py | 203 --
openserverless/mongodb_operator.py | 135 -
openserverless/mongodb_standalone.py | 73 -
openserverless/monitoring.py | 2 +-
openserverless/patcher.py | 12 +-
openserverless/policies/minio_rw_policy_tpl.json | 14 -
openserverless/redis.py | 149 +-
openserverless/redis_acl.py | 37 +
openserverless/redis_client.py | 45 +-
openserverless/registry_deploy.py | 6 +-
openserverless/s3_bucket_policy.py | 2 +-
openserverless/s3_client.py | 2 +-
openserverless/seaweedfs_deploy.py | 77 +-
openserverless/seaweedfs_util.py | 24 +-
openserverless/storage_static.py | 2 +-
openserverless/templates/00-minio-pvc.yaml | 32 -
openserverless/templates/01-minio-dep.yaml | 69 -
openserverless/templates/02-minio-svc.yaml | 37 -
openserverless/templates/alert-manager-02-cm.yaml | 10 +-
.../templates/kvrocks_manage_user_tpl.txt | 18 +
openserverless/templates/milvus-cfg-base.yaml | 15 +-
openserverless/templates/milvus-cfg-slim-base.yaml | 15 +-
.../templates/mongodb-auth-openserverless.yaml | 25 -
openserverless/templates/mongodb-auth.yaml | 25 -
openserverless/templates/mongodb-cm.yaml | 34 -
openserverless/templates/mongodb-config.yaml | 77 -
openserverless/templates/mongodb-sts.yaml | 90 -
.../templates/mongodb_manage_user_tpl.js | 37 -
openserverless/templates/nginx-static-sts.yaml | 2 +-
openserverless/templates/redis_manage_user_tpl.txt | 50 +-
openserverless/user_handlers.py | 16 +-
openserverless/util.py | 70 +-
openserverless/whisk_actions_deployer.py | 22 +-
openserverless/zookeeper.py | 5 +-
poetry.lock | 17 +
run.sh | 2 +-
tests/aks/whisk.yaml | 20 +-
tests/eks/whisk-full.yaml | 20 +-
tests/eks/whisk.yaml | 20 +-
tests/generic/whisk-full.yaml | 20 +-
tests/generic/whisk.yaml | 20 +-
tests/gke/whisk.yaml | 20 +-
tests/k3s/minimal.yaml | 17 +-
tests/k3s/whisk-full.yaml | 20 +-
tests/k3s/whisk.yaml | 20 +-
tests/kind/dbonly.yaml | 6 -
tests/kind/ferretdb_test.ipy | 78 +-
tests/kind/milvus_standalone_slim_test.ipy | 45 +-
tests/kind/milvus_standalone_test.ipy | 46 +-
tests/kind/minimal.yaml | 23 +-
tests/kind/minio_quota_test.ipy | 69 -
tests/kind/minio_test.ipy | 47 -
tests/kind/mongodb_op_test.ipy | 41 -
tests/kind/mongodb_std_test.ipy | 42 -
tests/kind/mongodb_user_test.ipy | 49 -
tests/kind/registry_test.ipy | 1 -
tests/kind/seaweedfs_test.ipy | 2 +-
...minio_util_test.ipy => seaweedfs_util_test.ipy} | 24 +-
...nio_static_test.ipy => storage_static_test.ipy} | 11 +-
tests/kind/whisk-affinity.yaml | 20 +-
tests/kind/whisk-full-affinity.yaml | 20 +-
tests/kind/whisk-full-mf.yaml | 20 +-
tests/kind/whisk-full-storage.yaml | 16 +-
tests/kind/whisk-full.yaml | 20 +-
tests/kind/whisk-mf-demo.yaml | 20 +-
tests/kind/whisk-minimal.yaml | 21 +-
tests/kind/whisk-slim.yaml | 21 +-
tests/kind/whisk.yaml | 20 +-
tests/lks/whisk-full.yaml | 20 +-
tests/lks/whisk.yaml | 20 +-
tests/microk8s/whisk-full.yaml | 20 +-
tests/microk8s/whisk.yaml | 20 +-
tests/openshift/minimal.yaml | 17 +-
tests/openshift/whisk-full.yaml | 20 +-
tests/openshift/whisk.yaml | 20 +-
tests/patcher/whisk-full-baupanlabs.yaml | 19 +-
tests/patcher/whisk-full-update.yaml | 19 +-
tests/patcher/whisk-update.yaml | 21 +-
tests/redis_tenant_acl_live.py | 145 +
tests/{minio-nuv.js => s3-nuv.js} | 20 +-
tests/{minio.js => s3.js} | 18 +-
tests/test_actionexecutor_cron_security.py | 112 +
tests/test_alertmanager_config.py | 37 +
tests/test_couchdb_metadata_security.py | 54 +
tests/test_datastore_connection.py | 100 +
tests/test_datastore_security.py | 178 ++
tests/test_ferretdb_provisioning.py | 105 +
tests/test_messaging_security.py | 278 ++
tests/test_operator_entrypoint.py | 49 +
tests/test_redis_tenant_acl.py | 145 +
tests/test_s3_anonymous_access.py | 196 ++
tests/whisk-full.yaml | 17 +-
tests/whisk.yaml | 21 +-
whisk-system.sh | 16 +-
214 files changed, 3396 insertions(+), 9294 deletions(-)
delete mode 100644 .gitmodules
create mode 100644 MESSAGING_SECURITY.md
rename actions/{devel/download/common/minio_util.py => common/s3_util.py} (95%)
rename actions/content/common/{minio_util.py => s3_util.py} (95%)
copy actions/devel/{ferretdb/common/minio_util.py =>
download/common/s3_util.py} (95%)
rename actions/{common/minio_util.py => devel/ferretdb/common/s3_util.py} (95%)
delete mode 100644 actions/devel/minio/common/minio_util.py
delete mode 100644 actions/devel/psql/common/minio_util.py
copy actions/devel/{ferretdb/common/minio_util.py => psql/common/s3_util.py}
(90%)
delete mode 100644 actions/devel/redis/common/minio_util.py
copy actions/devel/{ferretdb/common/minio_util.py => redis/common/s3_util.py}
(90%)
rename actions/devel/{minio => s3}/__main__.py (94%)
rename actions/devel/{minio/command/minio.py => s3/command/s3.py} (76%)
rename actions/devel/{minio => s3}/common/authorize.py (100%)
rename actions/devel/{minio => s3}/common/command_data.py (100%)
copy actions/devel/{ferretdb/common/minio_util.py => s3/common/s3_util.py}
(90%)
rename actions/devel/{minio => s3}/common/util.py (100%)
rename actions/devel/{minio => s3}/flatdict.py (100%)
rename actions/devel/{minio => s3}/openserverless/config.py (100%)
rename actions/devel/{minio => s3}/openserverless/couchdb_util.py (100%)
delete mode 100644 actions/devel/upload/common/minio_util.py
rename actions/devel/{ferretdb/common/minio_util.py =>
upload/common/s3_util.py} (90%)
rename demos/devel/{minio_buckets.json => s3_buckets.json} (100%)
rename demos/devel/{minio_cp.json => s3_cp.json} (100%)
rename demos/devel/{minio_ls.json => s3_ls.json} (100%)
rename demos/devel/{minio_mv.json => s3_mv.json} (100%)
rename demos/devel/{minio_rm.json => s3_rm.json} (100%)
delete mode 100644 deploy/demos/devel/minio_buckets.json
delete mode 100644 deploy/demos/devel/minio_cp.json
delete mode 100644 deploy/demos/devel/minio_ls.json
delete mode 100644 deploy/demos/devel/minio_mv.json
delete mode 100644 deploy/demos/devel/minio_rm.json
delete mode 100644 deploy/demos/reference/milvus_manifest.yaml
delete mode 100644 deploy/etcd/etcd-jwt-secret.yaml
create mode 100644 deploy/kafka/kafka-004-networkpolicy.yaml
delete mode 100644 deploy/milvus-slim/milvus-cfg-deps.yaml
delete mode 100644 deploy/minio/00-minio-pvc.yaml
delete mode 100644 deploy/minio/01-minio-dep.yaml
delete mode 100644 deploy/minio/02-minio-svc.yaml
delete mode 100644
deploy/mongodb-operator-deploy/mongodb-auth-openserverless.yaml
delete mode 100644 deploy/mongodb-operator-deploy/mongodb-auth.yaml
delete mode 100644 deploy/mongodb-operator-deploy/mongodb-svc.yaml
delete mode 100644 deploy/mongodb-operator-deploy/mongodb.yaml
delete mode 100644 deploy/mongodb-operator/mongodb-crd.yaml
delete mode 100644 deploy/mongodb-operator/mongodb-operator.yaml
delete mode 100644 deploy/mongodb-operator/mongodb-rbac.yaml
delete mode 100644 deploy/mongodb-standalone/mongodb-auth.yaml
delete mode 100644 deploy/mongodb-standalone/mongodb-cm.yaml
delete mode 100644 deploy/mongodb-standalone/mongodb-pvc.yaml
delete mode 100644 deploy/mongodb-standalone/mongodb-sts.yaml
delete mode 100644 deploy/mongodb-standalone/mongodb-svc.yaml
delete mode 100644 deploy/ngrok
delete mode 100644 deploy/qdrant/qdrant-cm.yaml
delete mode 100644 deploy/qdrant/qdrant-sts.yaml
delete mode 100644 deploy/qdrant/qdrant-svc.yaml
delete mode 100644 deploy/s3ninja/s3ninja-set.yaml
delete mode 100644 deploy/s3ninja/s3ninja-svc.yaml
create mode 100644 deploy/zookeeper/zookeeper-005-networkpolicy.yaml
delete mode 100644 openserverless/bucket.py
create mode 100644 openserverless/datastore_connection.py
create mode 100644 openserverless/datastore_security.py
create mode 100644 openserverless/etcd_admin.py
create mode 100644 openserverless/messaging_security.py
delete mode 100644 openserverless/minio_deploy.py
delete mode 100644 openserverless/minio_ingress.py
delete mode 100644 openserverless/minio_util.py
delete mode 100644 openserverless/mongodb.py
delete mode 100644 openserverless/mongodb_operator.py
delete mode 100644 openserverless/mongodb_standalone.py
delete mode 100644 openserverless/policies/minio_rw_policy_tpl.json
create mode 100644 openserverless/redis_acl.py
delete mode 100644 openserverless/templates/00-minio-pvc.yaml
delete mode 100644 openserverless/templates/01-minio-dep.yaml
delete mode 100644 openserverless/templates/02-minio-svc.yaml
delete mode 100644 openserverless/templates/mongodb-auth-openserverless.yaml
delete mode 100644 openserverless/templates/mongodb-auth.yaml
delete mode 100644 openserverless/templates/mongodb-cm.yaml
delete mode 100644 openserverless/templates/mongodb-config.yaml
delete mode 100644 openserverless/templates/mongodb-sts.yaml
delete mode 100644 openserverless/templates/mongodb_manage_user_tpl.js
delete mode 100644 tests/kind/minio_quota_test.ipy
delete mode 100644 tests/kind/minio_test.ipy
delete mode 100644 tests/kind/mongodb_op_test.ipy
delete mode 100644 tests/kind/mongodb_std_test.ipy
delete mode 100644 tests/kind/mongodb_user_test.ipy
rename tests/kind/{minio_util_test.ipy => seaweedfs_util_test.ipy} (66%)
rename tests/kind/{minio_static_test.ipy => storage_static_test.ipy} (82%)
create mode 100644 tests/redis_tenant_acl_live.py
rename tests/{minio-nuv.js => s3-nuv.js} (70%)
rename tests/{minio.js => s3.js} (70%)
create mode 100644 tests/test_actionexecutor_cron_security.py
create mode 100644 tests/test_alertmanager_config.py
create mode 100644 tests/test_couchdb_metadata_security.py
create mode 100644 tests/test_datastore_connection.py
create mode 100644 tests/test_datastore_security.py
create mode 100644 tests/test_ferretdb_provisioning.py
create mode 100644 tests/test_messaging_security.py
create mode 100644 tests/test_operator_entrypoint.py
create mode 100644 tests/test_redis_tenant_acl.py
create mode 100644 tests/test_s3_anonymous_access.py
