203 Commits

Author SHA1 Message Date
andres-portainer 315f8b674a fix(deps): replace dchest/uniuri with librand.String BE-13306 (#3377) 2026-08-06 09:48:08 -03:00
Xing 5d4dbb5a67 feat(kubernetes): advanced node drain options with agent failover [C9S-334] (#3346) 2026-08-05 12:09:44 +12:00
Steven Kang c67a5031c8 fix(addons): handle empty strings in add-on config forms [R8S-1188] (#3262) 2026-07-27 14:03:32 +12:00
bernard-portainer 8d7d2a1c2b fix(rbac-policy): add rolebindings for non-explicit namespaces [C9S-325] (#3236) 2026-07-23 15:26:24 +12:00
andres-portainer a1ef4ba0f9 fix(ssrf): use the net.Dialer from http.DefaultTransport BE-13245 (#3242) 2026-07-22 15:04:20 -03:00
Devon Steenberg 9cae64cc3e fix(swarm): allow manager operation header in reverse proxy [BE-13066] (#3174) 2026-07-21 09:02:47 +12:00
Devon Steenberg e5b306eb4f fix(swarm): swarm config + secrets path traversal [BE-13200] (#3179) 2026-07-20 11:10:27 +12:00
Steven Kang 21741af659 feat(addons): install support [R8S-1138] (#3189) 2026-07-16 14:52:15 +12:00
Oscar Zhou b485de295b fix(swarm): no image error for Docker private registry [BE-13217] (#3190) 2026-07-15 18:48:30 +12:00
Devon Steenberg b61f356ce6 fix(swarm): edge config relative env_file [BE-13189] (#3134) 2026-07-13 11:48:25 +12:00
Devon Steenberg 902942c5e2 fix(swarm): relative env_file [BE-13157] (#3122)
Co-authored-by: zacxihu <4939037+zacxihu@users.noreply.github.com>
2026-07-07 14:04:41 +12:00
Devon Steenberg fca59638d8 fix(swarm): manager operations [BE-13066] (#3096) 2026-07-06 10:49:26 +12:00
bernard-portainer 846ad6e5c8 refactor(gpu-operator): remove feature-flag for gpu visibility [C9S-268] (#3039) 2026-06-29 12:47:15 +12:00
Oscar Zhou 173c8c801c fix(swarm): detect early async deploy failures [BE-13101] (#3033)
Co-authored-by: siddamvinay2001 <siddamvinay1368@gmail.com>
2026-06-26 13:11:03 +12:00
Oscar Zhou ff106887f4 fix(stack): ensure downstream deployer respect timeout context [BE-12960] (#3021) 2026-06-24 15:39:39 +12:00
andres-portainer 527fd1032d fix(ssrf): fix URL parsing BE-13121 (#3011) 2026-06-23 12:29:12 -03:00
andres-portainer a6370808ae fix(ssrf): disable HTTP/2 for some specific cases BE-13121 (#2996) 2026-06-22 16:13:43 -03:00
bernard-portainer 5395dee4c6 feat(gpu-stats): add gpu stats to environments [C9S-200] (#2735) 2026-06-22 09:21:43 +12:00
andres-portainer 26334e9088 feat(ssrf): add missing transport wrappings and more checks BE-13021 (#2968) 2026-06-19 20:26:03 -03:00
nickl-portainer 0dfd27f08c fix(pnpm): pnpm format command failing [R8S-1071] (#2932) 2026-06-18 13:27:01 +12:00
Devon Steenberg ef807950f1 fix(compose-unpacker): port swarm commands to use libstack [BE-12915] (#2890) 2026-06-15 11:43:29 +12:00
Devon Steenberg 8b21dfc318 feat(ssrf): add ssrf allow list to settings [BE-13021] (#2858) 2026-06-12 15:16:06 +12:00
RHCowan 96dc79e253 feat(alerting): add Kubernetes API server high request latency alert [R8S-1049] (#2765)
Co-authored-by: Steven Kang <skan070@gmail.com>
2026-06-11 15:44:33 +12:00
Xing ac3416c5a2 feat(policies): define ObservabilityK8s policy type with deploy-and-connect and connect-only modes [C9S-121] (#2706)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-11 15:09:33 +12:00
andres-portainer 1765e41fd4 feat(ssrf): implement an SSRF protection mechanism BE-13021 (#2818) 2026-06-09 00:41:42 -03:00
Ali 0143393a8c chore(policies): use generic policy reconcile system so more than helm can be used [c9s-88] (#2613) 2026-06-05 07:47:25 +12:00
Chaim Lev-Ari 2ba8b582e2 feat(api): use generated api client [BE-12901] (#2727) 2026-06-03 14:37:39 +03:00
Xing e08ee08fd8 fix(policies): implement Helm release conflict detection for chart-based policies [C9S-204] (#2690) 2026-06-03 10:22:03 +12:00
bernard-portainer eca28fd4b5 fix(node-count) update docker node count for non-swarm [C9S-182] (#2702) 2026-05-25 14:19:17 +12:00
RHCowan 4c55508f01 fix(alerting): remove kube-scheduler and kube-controller-manager alert rules [R8S-1030] (#2695)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-19 19:07:11 +12:00
RHCowan df48afff17 feat(alerting): add kube-scheduler and kube-controller-manager health alerts [R8S-992] (#2671) 2026-05-19 09:53:20 +12:00
Devon Steenberg e4e8cf4942 fix(docker): remove docker binary from ce/ee images [BE-12917] (#2674) 2026-05-19 09:37:42 +12:00
Devon Steenberg 10e0185c49 fix(libstack): swarm relative path env files [BE-12975] (#2662) 2026-05-19 07:48:58 +12:00
Devon Steenberg 52d9fbc9f2 fix(libstack): use compose service to pull images [BE-12951] (#2658) 2026-05-18 09:25:22 +12:00
RHCowan 93e5486db3 feat(alerting): add built-in alert for Kubernetes API server TLS certificate expiry [R8S-991] (#2559) 2026-05-15 12:11:39 +12:00
Devon Steenberg c9d24c3684 fix(libstack): replace filepath.Join with filesystem.JoinPaths [BE-11476] (#2655) 2026-05-14 13:57:29 +12:00
Devon Steenberg 3b0f1eca4b feat(swarm): port swarm to use libstack [BE-11476] (#2486) 2026-05-14 10:13:19 +12:00
RHCowan d1b702ef37 feat(alerting): add etcd health metric and built-in alert rule [R8S-999] (#2538) 2026-05-13 18:56:09 +12:00
andres-portainer 62f4d47ee5 chore(internal): export endpoints and authorizations so they can be shared between CE and EE BE-12893 (#2464) 2026-05-11 10:44:09 -03:00
Cara Ryan 3d741ad58d fix(users): Fix for users effective access viewer not including policies [C9S-109] (#2539) 2026-05-08 15:00:17 +12:00
RHCowan ff169ed356 feat(alerting): expand tiered rules into per-severity evaluators with state aggregation [R8S-1003] (#2586) 2026-05-08 14:50:59 +12:00
Devon Steenberg e7ec69708e fix(libstack): pull images sequentially and respect COMPOSE_PARALLEL_LIMIT [BE-12930] (#2556) 2026-05-06 15:16:41 +12:00
RHCowan 6c097dcf51 feat(alerting): propagate edge annotations for meaningful Kubernetes summaries [R8S-993] (#2514) 2026-05-01 08:13:07 +12:00
RHCowan 49011d4d03 feat(alerting): Add built-in alert for Kubernetes nodes in NotReady state [R8S-990] (#2485) 2026-04-29 15:44:09 +12:00
Xing 6aac4f38e4 fix(test): isolate registry config in OCI client tests to fix env-dependent failures [C9S-119] (#2401) 2026-04-29 10:18:52 +12:00
RHCowan ba11fe920b fix(alerting) Use prometheus scrape manager [R8S-940] (#2198) 2026-04-22 10:06:45 +12:00
RHCowan 7f2da7811c feat/r8s 900/r8s 929/ee alerting foundations (#2167) 2026-04-22 10:06:44 +12:00
RHCowan 62cf2e42d5 feat(alerting): add shared CE Prometheus foundation and alert-state contracts [R8S-927] (#2129) 2026-04-22 10:06:44 +12:00
RHCowan f49cd6e932 feat(alerting): distribute enabled alert rules to edge agents via poll response [R8S-903] (#2007) 2026-04-22 10:06:43 +12:00
Steven Kang ac1e333dde feat(alerts): removal of snapshot reliance [R8S-902] (#1994) 2026-04-22 10:06:43 +12:00