0.9.0 (#130)
* fix: fix absolute path in run.sh
starting the operator locally gave error "No such file or directory task: Failed to run task "run": task: Failed to run task "d:run": exit status 127", because of an absolute path inside run.sh
* fix: path to check for db ready
changed the path for wait_db_ready. The path without the final / led to a 301 and not a 200
* fix: invoker and operator image from env
removed hardcoded values for cfg.get operator.image / operator.tag and invoker.image and invoker.tag. Config now check env vars and defaults to old images
* fix(test): milvus tests
fixed tests for minio / seaweedfs .
* chore(docs): taskfile
added desc to taskfile tasks
* fix: namespace validation
added namespace validation in user creation
* do not use a fixed offset to nuvolaris.io (#119)
* do not use a fixed offset to nuvolaris.io
* removed talos
---------
Co-authored-by: Trustable User <noreply@example.com>
* remove reference to nuvolaris logo (#120)
Co-authored-by: Trustable User <noreply@example.com>
* fix: validate database and bucket names in user provisioning (#121)
Follow-up to #109, which validated spec.namespace but left two other
tenant controlled WhiskUser fields flowing unsanitized into shell
commands executed inside the data pods via kubectl exec.
* spec.postgres.database reached `bash -c "... psql --dbname {db_name}"`
in exec_psql_command_in_db. Unlike the namespace field it never
becomes a filename, so it was not even constrained to path safe
characters.
* spec.object-storage.{data,route}.bucket reached
`sh -c "echo '{command}' | weed shell"` in the seaweedfs client,
where a quote breaks out of the single quoted string.
Adds util.validate_database_name and util.validate_bucket_name next to
the existing validate_namespace and applies them at the call sites and
at the shell sinks, plus matching CEL rules on the CRD so the API server
rejects the payload before the operator sees it. The regexes and the CEL
rules were cross checked to accept exactly the same inputs.
Also:
* guards the latent render_kvrocks_script / exec_kvrocks_command pair,
which repeats the same pattern but is not currently wired into the
user path
* makes validate_namespace return False for non string input instead of
raising TypeError
* corrects a copy pasted error message referring to exec_mongosh_command
inside exec_psql_command
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
* rebranding (#122)
Co-authored-by: Michele Sciabarra <michele@sciabarra.com>
* update naming
* operator build updated
* 0.9.0 (#124)
* updating distro in dockerfile
---------
Co-authored-by: Bruno Salzano <d4rkstar@gmail.com>
Co-authored-by: Trustable User <noreply@example.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Michele Sciabarra <michele@sciabarra.com>
Co-authored-by: miki3421 <42601846+miki3421@users.noreply.github.com>