Matthias Erll

Consistent and documented permissions of admin

1

**Is your feature request related to a problem? Please describe.** From discussions in #837 and suggested PR #842 there does not seem to be full concensus on * What `otomi-admin`...

fix: allow admin group to access all secrets

1

This PR fixes redkubes/otomi-core#837, as adding an additional group-policy assignment, allowing the `otomi-admin` user to access all teams' secrets. This approach has been chosen, diverting from the suggestion in the...

Multitenancy implementation in Vault

1

**Is your feature request related to a problem? Please describe.** Currently there is no implementation of the optional multitenancy in the Vault app. Since multitenancy enforcement used to be the...

**Describe the bug:** When creating a team directly with the Otomi install (values file), ingress/egress network policy self-service is activated by default; but when attempting to create a service as...

**Describe the bug:** Deploying several changes in a row creates multiple Tekton pipeline runs for `otomi-pipeline`. If an earlier pipeline takes a while, the second pipeline can fail due to...

**Describe the bug:** When a user signs into Gitea via OpenID for the first time, the initialized user name is derived from the prefix of the email address provided to...

This PR adds the `apl_enabled` flag to the `LKECluster` schema, as implemented in LinodeAPI/apinext#6767

This PR adds the `apl_enabled` flag to the `LKECluster` schema, as implemented in LinodeAPI/apinext#6767. Replaces #955, which could not be rebased properly.