Repository navigation

DNM: Restrict daemon reading the pull secret from a merged secret - #278

Open

alicefr wants to merge 14 commits into

bootc-dev:mainfrom

alicefr:restrict-secrets-v2

Open

DNM: Restrict daemon reading the pull secret from a merged secret #278
alicefr wants to merge 14 commits into
bootc-dev:mainfrom
alicefr:restrict-secrets-v2

Commits on Oct 30, 2026
- e2e: Install the released chart in the upgrade test
  alicefr
  committed
  e7a1d29
- controller: Add pull secret namespace list parser
  alicefr
  committed
  670fc77
- controller: Reject pull secrets outside allowed namespaces
  alicefr
  committed
  a57b90e
- controller: Restrict the Secret cache to allowed namespaces
  alicefr
  committed
  58078c7
- rbac: Grant secrets access through a namespaced Role
  alicefr
  committed
  a8bd81f
- helm: Add pullSecretNamespaces value
  alicefr
  committed
  a8f7b4a
- helm: Add chart template tests
  alicefr
  committed
  61e36a7
- e2e: Keep pullSecretNamespaces in the operator upgrade test
  alicefr
  committed
  d2c6f9e
- e2e: Test pull secrets from other namespaces
  alicefr
  committed
  1046667
- pullsecret: Add aggregated pull secret key
  alicefr
  committed
  c453ba1
- controller: Aggregate pull secrets into one Secret
  alicefr
  committed
  5dfb9e9
- daemon: Read the pull secret from the mounted Secret
  alicefr
  committed
  de8d7ad
- rbac: Drop the daemon's access to secrets
  alicefr
  committed
  a769d5c
- docs: Explain how to remove the aggregated pull secret
  alicefr
  committed
  7c63f4b