otterize/intents-operator issues and pull requests

#485 - Support restricting intents by service port

Issue - State: open - Opened by netthier 5 months ago

#484 - Improve ClientIntent status & event reporting robustness by using LRU cache & caching only after successful report

Pull Request - State: closed - Opened by amitlicht 5 months ago

#483 - Bugfixes to AWS IAM policy creation and deletion edge cases

Pull Request - State: closed - Opened by amitlicht 5 months ago

#482 - Report `AllowExternalTrafficPolicy` to the cloud to improve access status calculation for non-default config

Pull Request - State: closed - Opened by omris94 5 months ago

#481 - Fix MalformedPolicyDocument error when applying AWS IAM policies with 0 statements

Pull Request - State: closed - Opened by amitlicht 5 months ago

#480 - Use `"alb.ingress.kubernetes.io/target-type"` instead of `"alb.ingress.kubernetes.io/scheme"` to detect AWS ALB presence on Ingress

Pull Request - State: closed - Opened by orishoshan 6 months ago

#479 - Report intent statuses and events to the cloud to provide a better understanding of enforcement state

Pull Request - State: closed - Opened by omris94 6 months ago

#478 - Upload AWS ALB exemption config to cloud

Pull Request - State: closed - Opened by orishoshan 6 months ago

#477 - Fix bug where Istio policy would incorrectly report an error before retrying and succeeding

Pull Request - State: closed - Opened by orishoshan 6 months ago

#476 - Add support for detecting AWS ALB ingress resources and auto-allowing traffic

Pull Request - State: closed - Opened by orishoshan 6 months ago

#475 - Fix bug where a race condition could cause the operator to fail watching resources but still pass health checks

Pull Request - State: closed - Opened by omris94 6 months ago

#474 - Improve HTTP conversion logic, so it will handle empty resources list the same way it handles nil list

Pull Request - State: closed - Opened by omris94 6 months ago

#473 - Fix a bug where using clientIntents conversion webhook from `v2` to `v1` could crash if it has `service` target to `kubernetes.default`

Pull Request - State: closed - Opened by omris94 6 months ago

#472 - Fix validation webhook paths for api version `v1beta1`

Pull Request - State: closed - Opened by omris94 6 months ago

#471 - Changing spammy log line to debug

Pull Request - State: closed - Opened by evyatarmeged 6 months ago

#470 - Fix a bug where it took 10 minutes to sync operator's configuration with the cloud

Pull Request - State: closed - Opened by omris94 7 months ago

#469 - Revert "Revert "Revert "Revert "Avoid attempting to override pod cont…

Pull Request - State: closed - Opened by amitlicht 7 months ago

#468 - Bugfix on AWS integration: null dereference on AWS role object due to missing error handling

Pull Request - State: closed - Opened by amitlicht 7 months ago

#467 - Avoid attempting to override pod containers when updating labels & annotations

Pull Request - State: closed - Opened by amitlicht 7 months ago

#466 - Ensure webhook reconciler patches the Latest `CRD`/`ValidationWebhook` revision to minimize CA bundle edge cases

Pull Request - State: closed - Opened by omris94 7 months ago

#465 - Fix infinite reconciliation loop caused by a missing status in converted `clientIntents`

Pull Request - State: closed - Opened by omris94 7 months ago

#464 - Avoid overriding containers list on pod when patching label

Pull Request - State: closed - Opened by otterobert 7 months ago

#463 - Implement periodic reporting of operator configuration to the cloud

Pull Request - State: closed - Opened by omris94 7 months ago

#462 - Fix intent operator adding annotation intent when not needed

Pull Request - State: closed - Opened by otterobert 7 months ago

#461 - Retry reporting intents operator config on failure

Pull Request - State: closed - Opened by orishoshan 7 months ago

#460 - Make the conversion whebhook of `v1alpha3` and `v1beta1` preserve the way a service is addressed in `clientIntent.Spec.call[x].name` instead of changing it to an explicit form

Pull Request - State: closed - Opened by omris94 7 months ago

#459 - Fix a bug where applied intents to the Kubernetes API service couldn't be reported to the cloud properly

Pull Request - State: closed - Opened by omris94 7 months ago

#458 - Fix a bug where applied intents with kind in their targets wouldn't be reported properly

Pull Request - State: closed - Opened by omris94 7 months ago

#457 - Create a new linter to verify we have no calls to `errors.New` in the global scope

Pull Request - State: closed - Opened by omris94 7 months ago

#456 - Fix a case where applied kafka intents were reported without namespace to the cloud

Pull Request - State: closed - Opened by omris94 7 months ago

#455 - Ues v1alhpa3 as storage version

Pull Request - State: closed - Opened by omris94 7 months ago

#454 - Rename `v1` api version to `v1beta1`

Pull Request - State: closed - Opened by omris94 7 months ago

#453 - Add Markdown linter & go vet GitHub actions and fix lint issues detected by it

Pull Request - State: closed - Opened by amitlicht 7 months ago

#452 - Add support for external traffic network policies that are restricted to only allow the Ingress controller, rather than all traffic

Pull Request - State: closed - Opened by orishoshan 8 months ago

#451 - Reuse cloud API address config key for error telemetries APIs

Pull Request - State: closed - Opened by amitlicht 8 months ago

#450 - Fix error reporting missing stack trace due to using fmt.Errorf rather than errors.Errorf

Pull Request - State: closed - Opened by amitlicht 8 months ago

#449 - Ignore user not found errors on alter user password from postgres & mysql integrations

Pull Request - State: closed - Opened by amitlicht 8 months ago

#448 - Fix 'missing annotation shared service account' error reported due to race in intents reconcilers

Pull Request - State: closed - Opened by amitlicht 8 months ago

#447 - Ignore not-found errors when attempting to delete external traffic policies

Pull Request - State: closed - Opened by amitlicht 8 months ago

#446 - Support enabling access to servers using pod annotation

Pull Request - State: closed - Opened by NetanelBollag 8 months ago

#445 - Revert "Revert "Support specifying `kind` in `ClientIntents` (both for `spec.service` and `spec.calls.call`), `ProtectedServices`, and `KafkaServerConfigs`""

Pull Request - State: closed - Opened by omris94 8 months ago

#444 - Fix bug where Istio policy can erroneously report an error even though it succeeded if created by the intents reconciler and pods reconciler concurrently

Pull Request - State: closed - Opened by orishoshan 8 months ago

#443 - Fix bug where a cluster which has CronJob batch/v1beta1 resources that has been upgraded to batch/v1 cannot resolve pod owners if the owner is a v1beta1 CronJob, and stops at the Job instead

Pull Request - State: closed - Opened by orishoshan 8 months ago

#442 - Fixing bug where hashed usernames would exceed allowed MySQL username length

Pull Request - State: closed - Opened by evyatarmeged 8 months ago

#441 - Revert "Support specifying `kind` in `ClientIntents` (both for `spec.service` and `spec.calls.call`), `ProtectedServices`, and `KafkaServerConfigs`"

Pull Request - State: closed - Opened by evyatarmeged 8 months ago

#440 - Support reading database ServerConfig credentials from k8s secrets

Pull Request - State: closed - Opened by amitlicht 8 months ago

#439 - Promote the CRD API version `v1alpha3` to `v1`; introduce new CRD API version `v2alpha1` with a new structure of the `clientIntents`

Pull Request - State: closed - Opened by omris94 8 months ago

#438 - Fixed bug where deleted & reapplied intents would not trigger credentials-operator to configure database password

Pull Request - State: closed - Opened by evyatarmeged 9 months ago

#437 - Fix bug where DNS egress rules would be added twice; enable pprof by default on loopback

Pull Request - State: closed - Opened by orishoshan 9 months ago

#436 - Fixed bug where unresolved DNS names would cause egress network policies to not be created

Pull Request - State: closed - Opened by orishoshan 9 months ago

#435 - Use new error telemetry API

Pull Request - State: closed - Opened by orishoshan 9 months ago

#434 - Bugfix on database integrations: pods were annotated with DB names when intents are applied before pod admission

Pull Request - State: closed - Opened by amitlicht 9 months ago

#433 - Fixing bad type assertion in MySQL webhook

Pull Request - State: closed - Opened by evyatarmeged 9 months ago

#432 - Handle database intents scenario where pod does not exist at time of intents being applied

Pull Request - State: closed - Opened by evyatarmeged 9 months ago

#431 - Fix bug where k8s API server service IP address was missing when using service intents

Pull Request - State: closed - Opened by NetanelBollag 9 months ago

#430 - Update generated Graphql schema

Pull Request - State: closed - Opened by NetanelBollag 9 months ago

#429 - Update copy-manifests-to-helm for CRD removal from Helm chart (https://github.com/otterize/helm-charts/pull/209)

Pull Request - State: closed - Opened by orishoshan 9 months ago

#428 - Add support for auto-allowing egress DNS traffic when egress network policies are created

Pull Request - State: closed - Opened by orishoshan 9 months ago

#427 - Add stack traces to panics reported in telemetry error reporting

Pull Request - State: closed - Opened by orishoshan 9 months ago

#426 - Fixed bug where the operator in AWS RolesAnywhere multi-account mode would incorrectly present certificate chains to AWS

Pull Request - State: closed - Opened by orishoshan 9 months ago

#425 - Fixed bug where externally accessible services would be reported with an incorrect name sometimes, causing an incorrect result to be displayed on Otterize Cloud

Pull Request - State: closed - Opened by orishoshan 10 months ago

#424 - Add stack traces to errors that were not wrapped

Pull Request - State: closed - Opened by orishoshan 10 months ago

#423 - MySQL integration ClientIntents support

Pull Request - State: closed - Opened by amitlicht 10 months ago

#422 - Database enforcement support - new CRD and database permission configuration

Pull Request - State: closed - Opened by evyatarmeged 10 months ago

#421 - Addressing empty version before determining release stage

Pull Request - State: closed - Opened by evyatarmeged 10 months ago

#420 - Fixed bug where single accounts with AWS RolesAnywhere enabled would work incorrectly

Pull Request - State: closed - Opened by orishoshan 10 months ago

#419 - Add support for HTTP_PROXY, HTTPS_PROXY env variables

Pull Request - State: closed - Opened by orishoshan 10 months ago

#418 - Update README

Pull Request - State: open - Opened by vfiftyfive 10 months ago - 2 comments

#417 - Fix error reporting for errors caused by sentinel errors

Pull Request - State: closed - Opened by otterobert 10 months ago - 1 comment

#416 - Database enforcement support - new CRD and database permission configuration

Pull Request - State: closed - Opened by evyatarmeged 10 months ago

#415 - Support for multi-account AWS RolesAnywhere & implement auto-refresh for AWS token using RolesAnywhere

Pull Request - State: closed - Opened by orishoshan 10 months ago

#414 - Use $BUILDPLATFORM in Dockerfile

Pull Request - State: closed - Opened by orishavit 10 months ago

#413 - Update Kubernetes manifests auto-generation in the Makefile

Pull Request - State: closed - Opened by NetanelBollag 10 months ago

#412 - Minor tweaks to Postgres server config

Pull Request - State: closed - Opened by evyatarmeged 10 months ago

#411 - Fix cloud integration readme references

Pull Request - State: closed - Opened by otterobert 10 months ago - 1 comment

#410 - Experimental feature: use Docker image name to as workload identifier when randomized Jobs with no parent would be the workload identifier

Pull Request - State: closed - Opened by orishoshan 10 months ago

#409 - Support specifying `kind` in `ClientIntents` (both for `spec.service` and `spec.calls.call`), `ProtectedServices`, and `KafkaServerConfigs`

Pull Request - State: closed - Opened by omris94 10 months ago

#408 - Report namespaces for which enforcement is enabled in shadow mode to Otterize Cloud

Pull Request - State: closed - Opened by orishoshan 10 months ago

#407 - Support enabling enforcement per namespace while using defaultShadow enforcement mode

Pull Request - State: closed - Opened by omris94 10 months ago

#406 - Fix issue where panics would be misreported in error telemetry

Pull Request - State: closed - Opened by orishoshan 11 months ago

#405 - Fix benign problem where Completed pods would log errors when labeling was attempted; fix benign problem where pods that were just terminated logged an error when the operator tried to label them; set a lot of Info logs to Debug level

Pull Request - State: closed - Opened by orishoshan 11 months ago

#404 - Fix bug where external access policy is not created for protected services with ingress

Pull Request - State: closed - Opened by NetanelBollag 11 months ago

#403 - Support templating by $(AWS_REGION) & $(AWS_ACCOUNT_ID)

Pull Request - State: closed - Opened by amitlicht 11 months ago

#402 - Report errors group one by one instead of all together

Pull Request - State: closed - Opened by NetanelBollag 11 months ago

#401 - Group bugsnag error reports by class, file & method name (ignoring line numbers)

Pull Request - State: closed - Opened by amitlicht 11 months ago - 1 comment

#400 - Update README with Azure & Google Cloud IAM references

Pull Request - State: closed - Opened by amitlicht 11 months ago

#399 - Faster cross-platform build for intents-operator

Pull Request - State: closed - Opened by orishoshan 11 months ago

#398 - Fix a case where intents to services with a namedPort created network policies without port specification

Pull Request - State: closed - Opened by omris94 11 months ago

#397 - Always use `serviceidentity.ServiceIdentity` when creating `otterizeFormattedIdentity` to avoid code duplications and potential bugs

Pull Request - State: closed - Opened by omris94 11 months ago

#396 - Update AWS dependencies to correctly discover EKS metadata

Pull Request - State: closed - Opened by otterobert 11 months ago

#395 - Move dedicated intents- and credentials- related parts of IAM agents out of shared and into operators

Pull Request - State: closed - Opened by amitlicht 11 months ago - 1 comment

#394 - Report services that won't be blocked due to external access even when no network policy

Pull Request - State: closed - Opened by NetanelBollag 11 months ago

#393 - Bugfix: ignore error 404 NOT_FOUND on attempting to delete user assigned identities

Pull Request - State: closed - Opened by amitlicht 11 months ago

#392 - Database enforcement support - new CRD and database permission configuration

Pull Request - State: closed - Opened by evyatarmeged 11 months ago

#390 - Azure Key Vault policy support

Pull Request - State: closed - Opened by amitlicht 11 months ago

#388 - Move intents-related parts of IAM agents out of shared and into intents-operator

Pull Request - State: closed - Opened by amitlicht 11 months ago - 1 comment

#387 - Support azure custom actions & data actions

Pull Request - State: closed - Opened by amitlicht 11 months ago

#382 - Updated Network Section of ReadMe

Pull Request - State: closed - Opened by bglynn 11 months ago - 2 comments

#364 - Add periodic reconcile for database intents to include newly created tables.

Pull Request - State: closed - Opened by evyatarmeged 12 months ago

#324 - Add support for Linkerd to the intents-operator

Pull Request - State: open - Opened by aerosouund about 1 year ago - 6 comments

GitHub / otterize/intents-operator issues and pull requests