Commit Graph

  • 6acf239f6b Merge pull request #11 from paasup/build/etcd-20260804060806 wbsong111 2026-08-04 15:39:41 +09:00
  • 6e6d006057 Merge pull request #12 from paasup/fix/self-build-no-pr-create wbsong111 2026-08-04 15:39:12 +09:00
  • 6f61c02aaf cloudnative-pg 이미지 태그 갱신: 1.30.0-security-hardened-20260803 → 1.30.0-security-hardened-20260804 github-actions[bot] 2026-08-04 06:30:06 +00:00
  • d449504088 self-build-image: 자동 PR 생성 제거, 브랜치 push + compare 링크 안내로 대체 wbsong111 2026-08-04 15:26:17 +09:00
  • b4a0b87842 etcd 이미지 태그 갱신: 3.7.1-security-hardened-20260803 → 3.7.1-security-hardened-20260804 github-actions[bot] 2026-08-04 06:08:06 +00:00
  • d7744c3cfc Merge pull request #10 from paasup/feat/introduce-cve-gate wbsong111 2026-08-04 14:40:30 +09:00
  • 14c05f1e61 카탈로그에서 kong·unitycatalog·rancher-monitoring(-crd) 제거 wbsong111 2026-08-04 13:04:57 +09:00
  • 4e2e57cebc cve-gate.py: 요약 표를 차트별로 정렬 + 이미지 다중 차트 귀속 보정 wbsong111 2026-08-04 11:43:21 +09:00
  • d714667f81 generate-sbom.sh: 재시도 로그의 unbound variable 버그 수정 wbsong111 2026-08-04 11:22:21 +09:00
  • 9b76b6f2a1 scan-sbom.sh: 취약점 요약을 차트별로 묶고 차트 합계 행 추가 wbsong111 2026-08-04 11:22:07 +09:00
  • aadbf866fb cve-gate.py: Job Summary용 축약 리포트(--brief-md) 추가 — 1MB 제한 대응 wbsong111 2026-08-03 16:46:01 +09:00
  • 6bdea97e51 자체 빌드 이미지 3종 docker.io/paasup 재빌드·push + 카탈로그 values 갱신 wbsong111 2026-08-03 15:32:27 +09:00
  • 6597059a15 scan-sbom.sh: CoverageProbe 커버리지 자가진단 이식 + 관련 파이프라인 버그 수정 wbsong111 2026-08-03 15:30:57 +09:00
  • 6878b61efa 자체 빌드 이미지 3종(cloudnative-pg/cnpg-postgresql/etcd) + 대응 헬름 차트 도입 wbsong111 2026-08-03 12:03:37 +09:00
  • a168a3c7e6 docs(image-authoring): CoverageProbe cov= 확인 지시 제거 + Dockerfile 경로 주석 정정 wbsong111 2026-08-03 11:25:20 +09:00
  • 100e8cfc61 scan-sbom.sh: macOS(BSD) xargs 병렬 스캔 버그 수정 wbsong111 2026-08-03 10:23:12 +09:00
  • 5e1422e0e4 CVE/SBOM 게이트 문서화: CLAUDE.md 3번째 서브시스템 + MEMORY.md 신설 wbsong111 2026-08-03 10:06:48 +09:00
  • cb7541647d sbom.yml/cve-edge-post.yml: 스크립트 경로 이전 반영 + 게이트 연결 wbsong111 2026-08-03 09:59:43 +09:00
  • 844c567d0d 자체 빌드 이미지 프레임워크 도입 (실사용 이미지 없음) wbsong111 2026-08-03 09:55:52 +09:00
  • 20d7a41193 CVE 게이트(scripts/pipeline/cve-gate.py) 도입 wbsong111 2026-08-03 09:25:21 +09:00
  • 39bb879495 scripts/pipeline/ 신설: 기존 SBOM 스캔 스크립트 경로 이동 wbsong111 2026-08-03 09:25:03 +09:00
  • e3e5ba9751 cve-edge-post schedule comment ychangkim 2026-07-23 13:26:36 +09:00
  • d2d20ce3b2 action summary ychangkim 2026-07-22 17:43:34 +09:00
  • d6183e98c7 action summary ychangkim 2026-07-22 17:40:19 +09:00
  • a992b2e12a sbom 기준 체크 ychangkim 2026-07-21 17:51:58 +09:00
  • 392766442b fix: explicitly scan all severities in cve-edge-post trivy scan ychangkim 2026-07-21 17:36:39 +09:00
  • bec87f12bb feat: emit one CVE result per (catalog, version) instead of per image ychangkim 2026-07-21 17:00:41 +09:00
  • d2e804b482 feat: include short description with each critical CVE in summary ychangkim 2026-07-21 13:39:26 +09:00
  • f6eaf3c664 feat: add chart filter input to cve-edge-post workflow ychangkim 2026-07-21 10:21:19 +09:00
  • 8b370be748 feat: add chart filter input to cve-edge-post workflow ychangkim 2026-07-21 10:20:13 +09:00
  • a1e726b755 fix: use memory cache backend for parallel trivy scans ychangkim 2026-07-20 18:12:19 +09:00
  • 9a434bb27a fix: match dockerhub env var names in registry auth script ychangkim 2026-07-20 18:10:24 +09:00
  • 607772283d refactor: scan images directly with trivy, output per-image CVE JSON ychangkim 2026-07-20 18:08:06 +09:00
  • 9b6d978e31 chore: pin sbom pipeline image, use paasup dockerhub secrets ychangkim 2026-07-20 17:35:57 +09:00
  • 9b368e4cfc feat: add jq to sbom pipeline image, rename cve workflow ychangkim 2026-07-20 17:21:39 +09:00
  • 25e05e0ba2 Create cve-edge-post.yml 김영창 2026-07-20 17:14:51 +09:00
  • 16b1b5bed9 Merge pull request #6 from paasup/update-qdrant/1.18.2 wbsong111 2026-07-14 14:49:40 +09:00
  • 41af7537a0 feat(catalog): add qdrant 1.18.2 chart wbsong111 2026-07-14 14:44:13 +09:00
  • 56b8b2e4c6 Merge pull request #4 from paasup/docs/tenant-onboarding-guide wbsong111 2026-07-09 16:14:04 +09:00
  • 44c3888974 docs: add tenant onboarding guide (VictoriaMetrics + Perses multitenancy) wbsong111 2026-07-09 16:09:32 +09:00
  • ac119a3559 fix(sbom-ci): auth docker.getcollate.io (Docker Hub proxy) + raise trivy timeout wbsong111 2026-07-08 16:55:08 +09:00
  • 18ca8cd979 fix(catalog): exclude windowsExporter from rancher-monitoring wbsong111 2026-07-08 16:32:22 +09:00
  • 1d8e68eaf5 fix(catalog): repoint dead upstream image refs to existing coordinates wbsong111 2026-07-08 16:21:53 +09:00
  • c36edb3015 sbom-ci: meaningful stage timings, dynamic severity cols, doc update wbsong111 2026-07-08 14:29:07 +09:00
  • f8ca673630 fix(sbom-ci): summary shows only scanned severities (drop always-zero MED/LOW) wbsong111 2026-07-08 14:14:27 +09:00
  • a61d6730dd fix(sbom-ci): clean artifact layout + add limit input for test runs wbsong111 2026-07-08 14:08:03 +09:00
  • d6e3d0af79 docs(sbom): add pipeline image Dockerfile + cross-reference from workflow wbsong111 2026-07-08 13:26:04 +09:00
  • 2af7fcb43d feat(sbom): add Helm catalog SBOM+vuln pipeline (CycloneDX) wbsong111 2026-07-08 12:15:58 +09:00
  • 9676fec2f3 docs: correct VictoriaLogs tenant header to AccountID/ProjectID across docs wbsong111 2026-07-01 15:45:10 +09:00
  • aef64390f1 fix(otelcol): use AccountID/ProjectID headers for VictoriaLogs multitenancy wbsong111 2026-07-01 15:37:46 +09:00
  • b022204004 docs: formalize monitoring deploy runbook; move test record to issue #2 wbsong111 2026-06-25 16:45:01 +09:00
  • d35117a976 docs: capture internal-CA trust requirement for vmauth/perses OIDC + perses login=preferred_username Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> wbsong111 2026-06-25 16:11:18 +09:00
  • 9fab760992 vmauth: mount internal root CA + SSL_CERT_FILE for Keycloak OIDC discovery (fix x509) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> wbsong111 2026-06-25 16:06:14 +09:00
  • 7ddb1f062d improvements: ApplicationSet ignoreDifferences(SS VCT) + vmauth drop unauthorized_user Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> wbsong111 2026-06-25 15:16:21 +09:00
  • 14fb0d214a perses overlay template: globalAdminUsers note (login=preferred_username) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> wbsong111 2026-06-25 15:01:57 +09:00
  • d1f7c77201 Adjust VM ApplicationSet for test env + per-URL tenant routing rationale wbsong111 2026-06-25 14:36:58 +09:00
  • 6290322f1b Add VictoriaMetrics observability stack + sync catalog for monitoring test wbsong111 2026-06-25 11:10:51 +09:00
  • a55427730e dip quotas yaml add ychangkim 2026-06-18 15:23:09 +09:00
  • 6805aa652f dip questions yaml add ychangkim 2026-06-16 16:37:07 +09:00
  • f4d287abef update lakekeeper/0.11.0 wbsong111 2026-06-15 09:13:31 +09:00
  • 1ab3d4d31c mlflow dip values ychangkim 2026-06-10 15:10:47 +09:00
  • 4064cd8971 dip values add ychangkim 2026-06-09 16:30:22 +09:00
  • 409536ee7c dip values add ychangkim 2026-06-09 14:53:33 +09:00
  • 3da2d3b4b8 dip-values add ychangkim 2026-06-09 13:07:22 +09:00
  • 5590af0ec5 dip-values add ychangkim 2026-06-09 13:06:40 +09:00
  • e64f933901 dip-values add ychangkim 2026-06-09 11:51:43 +09:00
  • 162d9b2c2a Update jupyter configuration for network connection wbsong111 2026-05-06 09:00:16 +09:00
  • 547dc58e8b patch before_request.py to allow workspace creation with EDIT permission wbsong111 2026-04-27 16:58:04 +09:00
  • 5fac7175a5 Update mlflow REAMD.md wbsong111 2026-04-27 11:10:33 +09:00
  • bc4396a62e Merge remote-tracking branch with mlflow 1.9.0 README conflict resolved wbsong111 2026-04-27 10:44:11 +09:00
  • b897f0ad37 Add multi-tenant feature wbsong111 2026-04-27 10:39:55 +09:00
  • e678775672 Update README.md wbsong111 2026-04-24 09:59:57 +09:00
  • ba0a4b19bc Update CUSTOM-README.md wbsong111 2026-04-23 16:34:40 +09:00
  • 8e68b1d603 Update CUSTOM-README.md wbsong111 2026-04-23 16:32:52 +09:00
  • d31a1fae18 Add service account and role/rolebinding wbsong111 2026-04-23 16:30:38 +09:00
  • ed0542e36d Add service account and role/rolebinding wbsong111 2026-04-23 16:23:37 +09:00
  • 502e7f8e2b Replace hardcoded resource names with Helm template helpers wbsong111 2026-04-23 14:35:15 +09:00
  • 9c30bf0a80 Replace hardcoded resource names with Helm template helpers wbsong111 2026-04-23 14:22:02 +09:00
  • aec5bc74ac Replace hardcoded resource names with Helm template helpers wbsong111 2026-04-23 14:15:58 +09:00
  • 3a78d39b7a Add chart mlflow 1.9.0 wbsong111 2026-04-22 17:08:02 +09:00
  • b8942c5f46 Modify image name wbsong111 2026-04-22 17:04:56 +09:00
  • 24ee4ec731 Add chart flink cdc job wbsong111 2026-04-21 16:43:09 +09:00
  • bae49f352c Update BUILD-README.md wbsong111 2026-04-21 16:13:00 +09:00
  • 03460b4fa6 Add chart flink cdc session cluster chart wbsong111 2026-04-21 16:10:10 +09:00
  • 8aca1e74f9 fix: prevent root-owned .cache files by adding --no-cache-dir to pip upgrade ychangkim 2026-04-20 14:37:27 +09:00
  • baba7dcf55 Define resource profiles for cloudbeaver wbsong111 2026-04-13 16:23:08 +09:00
  • 83c61ee0e2 Add chart cloudbeaver 1.1.4 wbsong111 2026-04-13 13:09:02 +09:00
  • c6ed7cb4e9 Remove tracked Python bytecode files and add .gitignore wbsong111 2026-04-13 13:07:07 +09:00
  • eb11d74e9f feat: add configurable shmSizeLimit for /dev/shm in jupyterlab chart ychangkim 2026-04-01 17:40:33 +09:00
  • 9be83c6f3a feat: support inline tag in image.repository for jupyterlab chart ychangkim 2026-03-31 12:29:23 +09:00
  • b4213e4872 feat: add /dev/shm shared memory volume to jupyterlab deployment ychangkim 2026-03-26 18:13:44 +09:00
  • af34d9280e jupyterlab ychangkim 2026-03-26 15:14:05 +09:00
  • d3d3ee8496 openmetadata applicationset ychangkim 2026-03-15 18:03:29 +09:00
  • 65c7f6b319 openmetadata applicationset ychangkim 2026-03-14 18:04:37 +09:00
  • 91919232ed openmetadata applicationset ychangkim 2026-03-14 16:09:39 +09:00
  • ba3704dade Add applicationset for openmetadata wbsong111 2026-03-10 17:11:25 +09:00
  • 21addb6e88 Move directory wbsong111 2026-03-06 17:08:31 +09:00
  • 4d99258344 Merge branch 'main' of https://github.com/paasup/dip-catalog wbsong111 2026-03-06 17:06:51 +09:00
  • ca64890bb6 Add catalog update agent wbsong111 2026-03-06 17:06:07 +09:00
  • 28e4601ef2 Update openmetadata resouce wbsong111 2026-02-27 14:59:32 +09:00