Search results

feat(platform): auto-wire KubeVirt permittedHostDevices + HostDevices feature gate when gpu-operator is enabled

Status: Open.

#2765 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on May 28, 2026

feat(gpu-operator): add container variant for hosts with a pre-installed NVIDIA driver

Status: Open.

#2764 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on May 28, 2026

bug(gpu-operator): passthrough variant silently skips VFIO bind when host has a pre-installed NVIDIA driver

Status: Open.

#2763 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on May 28, 2026

Reconciling a tenant kubernetes app triggers MetalLB L2 VIP re-announcement and brief edge outage

Status: Open.

#2754 In cozystack/cozystack;

· mattia-eleuteri opened on May 27, 2026

cozy-installer: expose cozystackOperator.resources values knob for PSA-strict / Kyverno-enforce clusters

Status: Open.

#2750 In cozystack/cozystack;

· abzholdings opened on May 27, 2026

Migrate cert-manager family Makefiles to %-update with pinned CHART_VERSION

area/platformIssues or PRs related to platform infrastructure (bundle, flux, talos, installer)Issues or PRs related to platform infrastructure (bundle, flux, talos, installer)

kind/cleanupCategorizes issue or PR as related to cleanup of code, process, or technical debtCategorizes issue or PR as related to cleanup of code, process, or technical debt

Status: Open.

#2747 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on May 26, 2026

Job backup strategy: make batch/v1.Job backoffLimit configurable

Status: Open.

#2742 In cozystack/cozystack;

· Timofei Larkin (lllamnyp) opened on May 26, 2026

[harbor] Pinned at v2.14.2 — vulnerable to GHSA-prh4-vhfh-24mj (LDAP/OIDC secrets in audit log)

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

security/confirmedConfirmed vulnerabilityConfirmed vulnerability

security/mediumMedium severity security findingMedium severity security finding

Status: Open.

#2739 In cozystack/cozystack;

· myasnikovdaniil opened on May 26, 2026

[harbor] Default registry basic-auth credentials (harbor_registry_user/password) bypass Harbor RBAC

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

security/confirmedConfirmed vulnerabilityConfirmed vulnerability

security/highHigh severity security findingHigh severity security finding

Status: Open.

#2738 In cozystack/cozystack;

· myasnikovdaniil opened on May 26, 2026

[cozy-proxy] DaemonSet runs privileged: true cluster-wide while only needing NET_ADMIN

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

security/highHigh severity security findingHigh severity security finding

Status: Open.

#2737 In cozystack/cozystack;

· myasnikovdaniil opened on May 26, 2026

[harbor] Default secretKey "not-a-secure-key" leaves every stored credential decryptable

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

security/criticalCritical security vulnerabilityCritical security vulnerability

Status: Open.

#2736 In cozystack/cozystack;

· myasnikovdaniil opened on May 26, 2026

Replace system-namespace projection tick with a watch on the source Secret

area/storageIssues or PRs related to storage (linstor, seaweedfs, bucket, velero, harbor)Issues or PRs related to storage (linstor, seaweedfs, bucket, velero, harbor)

kind/cleanupCategorizes issue or PR as related to cleanup of code, process, or technical debtCategorizes issue or PR as related to cleanup of code, process, or technical debt

Status: Open.

#2735 In cozystack/cozystack;

· Timofei Larkin (lllamnyp) opened on May 26, 2026