tinycode-operator v0.2.1
Operator image: quay.io/bjohns/tinycode-operator:v0.2.1
Changes
- Declarative vLLM config (
spec.vllm) with auto-probing and 80/20 context/output split - Cross-namespace vLLM discovery (
spec.discovery.namespaces) - GitOps mode (
spec.git) with init container, credential support, pullOnRestart - Shared team workspace (
spec.storage.projectsAccessMode: ReadWriteMany) - OpenShift management extensions (kubeconfigNamespace, clusterRole)
- OLM bundle for OperatorHub with FBC catalog
- HELM_DRIVER=configmap for namespace RBAC fix
- Shell injection prevention (Helm template quoting)
- CRD validation tightening (git URL/branch patterns, clusterRole allowlist, image registry restriction)
- SSRF prevention in vLLM URL probing
- SCC RBAC fix (added patch/update verbs)
- NetworkPolicy Helm template
- Secret read audit logging
- Kubeconfig exception sanitization
- kubernetes 29→36.0.2 (urllib3 CVE fix)
- kopf 1.37→1.44.6, pyyaml 6.0.3
- GitHub Actions pinned to SHA (checkout v7, setup-python v6)
- Complete spec reference documentation (34 CRD fields)