• v0.1.90 aeb51ed66c

    v0.1.90 Stable

    gitea_admin released this 2026-07-06 21:06:30 +00:00 | 906 commits to main since this release

    Fixed

    • A Role that patches a CR */status subresource must also grant get. kubectl patch --subresource=status --type=merge GETs the subresource first, so a patch-only grant fails with
      "cannot get resource /status" and the status write silently no-ops. Fixes the per-image
      PipelineRelease RBAC (pipelinereleases/status was [patch][get,patch]), which would have
      left every builder-images release row non-terminal. Adds a regression guard
      (tests/rbac-status-subresource.sh, wired into tests/check.sh) that fails if any Role patches a
      */status resource without get.

    Included changes (v0.1.89 -> v0.1.90)

    • b99e9908560f test(rbac): guard that a Role patching */status also grants get
    Downloads