Skip to content

v0.1.1 — Security & Polish

Choose a tag to compare

View all tags
@bobbyjohnstx bobbyjohnstx released this 26 Jun 17:07
· 12 commits to main since this release
v0.1.1
8c430c5

tinycode-operator v0.1.1

Security hardening and documentation improvements.

Security

  • Shell injection prevention in Helm git init container (quoted values)
  • CRD validation patterns tightened (image registry allowlist, git URL/branch, clusterRole allowlist)
  • SSRF prevention in vLLM URL probing (metadata endpoint blocking)
  • SCC RBAC fix (added patch/update verbs to match operator code)
  • Helm template value quoting for all user-controlled strings
  • Kubeconfig exception sanitization (no secret content in status)
  • NetworkPolicy Helm template
  • Secret read audit logging

Fixed

  • CI YAML validation for multi-document samples (safe_load_all)
  • CONTRIBUTING.md CRD name corrected (TinycodeInstance)
  • CONTAINER.md synced with authoritative container repo version

Added

  • CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md, CHANGELOG.md
  • CI workflow (Python lint, Helm lint, YAML validation)
  • CI/License/Release badges
  • Issue/PR templates, Dependabot, .gitignore
  • License section in README

Full changelog

v0.1.0...v0.1.1

Assets 2
Loading