capsule-proxy
capsule-proxy copied to clipboard
projectcapsule
Reverse proxy for Capsule Operator.
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.4 to 0.30.0. Commits 3aa4577 Update dependencies to v0.30.0 tag 2df4de1 Merge remote-tracking branch 'origin/master' into release-1.30 ade2ae2 Update x/net for CVE-2023-45288 b4632b7 Merge pull request #123932...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.28.4 to 0.30.0. Commits 37988e5 Merge remote-tracking branch 'origin/master' into release-1.30 c857a38 Update x/net for CVE-2023-45288 0407311 followup to allow special characters 25164f7 Merge pull request #123435...
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.28.4 to 0.30.0. Commits 9b2e61f Update dependencies to v0.30.0 tag 15c77ce Merge remote-tracking branch 'origin/master' into release-1.30 61d3001 Rename cluster to storage_cluster_id for apiserver_storage_size_bytes metric d97582e Merge...
# Describe the feature capsule-proxy can support list cluster-scope resource like ns,node in a tenant. but if I'm a tenant owner,I want to list namespaced-scope resource(pods for example)with all ns...
Add support for MutatingWebhookConfigurations, ValidatingWebhookConfigurations, and EndpointSlices
It would be great to run separate service meshes like Istio or Linkerd for each tenant, but I believe most would at least require access to the following cluster level...
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.4.1-0.20230718164431-9a2bf3000d16 to 0.6.1. Release notes Sourced from github.com/prometheus/client_model's releases. v0.6.1 What's Changed Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in prometheus/client_model#84 Full Changelog: https://github.com/prometheus/client_model/compare/v0.6.0...v0.6.1 v0.6.0 What's...
The current e2e is unusable, too flaky, and unreliable. As we did with Capsule, the e2e should be rewritten in Ginkgo.
Starting the discussion from https://github.com/clastix/capsule-proxy/issues/266#issuecomment-1456226221 thanks to @MaxFedotov: > I remember why I added this feature. The idea was the following: > - `Tenant admin` create a `role` and `rolebinding`...
Investigate if the capsule-proxy can enforce the tenant label in a given PromQL query, in Prometheus API responses, and in Alert Manager API requests as [prom-label-proxy](https://github.com/prometheus-community/prom-label-proxy) does.
One key point of `capsule-proxy` is that we're just leveraging the Kubernetes API labels filtering capabilities to serve the expected resources a Tenant Owner (TO) is eager to get. 1....