LAB/PegaProx_project-pegaprox
1
0
Fork 0
mirror of https://github.com/PegaProx/project-pegaprox.git synced 2026-08-12 15:27:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • bd938b9f17 fix(auth): don't log out during an OIDC callback exchange (#681) Testing MrMasterbay 2026-08-11 19:08:16 +02:00
  • dd03f7dc0e
         fix(oidc): apply custom roles from group mappings instead of dropping them (#682) kglowinska 2026-08-11 19:05:04 +02:00
  • 18d03f0476 feat(update): install-method-aware self-update (apt / docker / source) MrMasterbay 2026-08-11 19:02:44 +02:00
  • 07b08ce8ff fix(oidc): warn when several custom-role group mappings match karolina.glowinska 2026-08-11 13:02:06 +02:00
  • 8ca0a06853 fix(oidc): don't let a matched mapping demote a configured admin default karolina.glowinska 2026-08-11 12:41:06 +02:00
  • e538d206cc oidc: apply custom roles from group mappings instead of dropping them karolina.glowinska 2026-08-11 11:25:47 +02:00
  • 841ffb8a34
         Merge 8f1fde95deda2849647eb5f3f6f5f5bd8a59697a into ae7a7275d799bd5808a09befa91e169ccfb844c9 yanjunpu 2026-08-11 08:33:05 +02:00
  • ae7a7275d7 harden self-update: don't restart into a failed dependency upgrade mkellermann97 2026-08-11 08:20:08 +02:00
  • 8f1fde95de fix(config-vault): handle follow-up review edge cases yanjunpu 2026-08-10 23:12:54 +08:00
  • dc46f8b53c security(config-vault): revalidate WebDAV request targets yanjunpu 2026-08-10 23:03:31 +08:00
  • 576a0c3984 Merge remote-tracking branch 'origin/Testing' into feat/config-vault-sync yanjunpu 2026-08-10 22:58:21 +08:00
  • f18b8e6679 fix(config-vault): address review feedback yanjunpu 2026-08-10 22:58:17 +08:00
  • 00ae6ffcb2 refactor(ui): simplify cloud backup navigation yanjunpu 2026-08-10 18:04:52 +08:00
  • 3c5775d3d7 fix(i18n): polish remote restore labels yanjunpu 2026-08-10 17:40:46 +08:00
  • 5a3af0aa47 feat(config-vault): browse and restore remote backups yanjunpu 2026-08-10 17:20:23 +08:00
  • b57f454736 security(ssrf): pin webhook target to resolved IP + gate custom-template image_url at wget sink MrMasterbay 2026-08-10 08:53:20 +02:00
  • d26f044ccd security(authz): tighten backup-job target gate + guard unpooled-VM int() MrMasterbay 2026-08-10 08:50:15 +02:00
  • 4a702cd742 security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido) MrMasterbay 2026-08-10 08:36:27 +02:00
  • ebc876c3e7 security(authz): per-VM authorization on 5 BOLA routes (Aikido) MrMasterbay 2026-08-10 08:31:47 +02:00
  • d41e0a3b3b feat(ui): move config backups to sync and cloud tab yanjunpu 2026-08-10 14:26:33 +08:00
  • 3e2879a681 security(authz): object-level gates on VMware + PBS write/delete/diagnose (Aikido BOLA) MrMasterbay 2026-08-10 08:18:08 +02:00
  • 8b5309fab3 fix(i18n): translate config vault provider fields yanjunpu 2026-08-10 14:14:01 +08:00
  • 677e2d06f8 feat: add encrypted configuration vault sync yanjunpu 2026-08-10 04:07:25 +08:00
  • 7ba2a54c5f release: PegaProx 1.0.1 main v1.0.1 MrMasterbay 2026-08-09 21:30:30 +02:00
  • a07324be82 fix: audit follow-ups — token-scoped rate reads, i18n relative-time, arm64 CI gate, BMC tests MrMasterbay 2026-08-09 21:14:51 +02:00
  • 13fefedb31 fix: audit remediation — LXC add-disk slot safety + 3 UI/i18n fixes MrMasterbay 2026-08-09 21:01:51 +02:00
  • 6515d0dca5 i18n(zh): restore the PegaProx brand name in the app title/subtitle MrMasterbay 2026-08-09 20:37:07 +02:00
  • f335057d0a security(authz): scope cost-rate reads too (Aikido IDOR follow-up) MrMasterbay 2026-08-09 20:13:48 +02:00
  • 82f7cfe0c8 fix(hardening): keep VNC-tunnel forwarding + make applied CIS controls rollback-selectable MrMasterbay 2026-08-09 20:08:31 +02:00
  • 965ec2ce6e security(authz): close 2 Aikido code-audit gaps (portal reboot perm + power-rates IDOR) MrMasterbay 2026-08-09 20:00:23 +02:00
  • d6da9c1e60 i18n(zh): backfill 13 Simplified Chinese strings missing from the zh map MrMasterbay 2026-08-09 19:53:38 +02:00
  • efa1972897 Merge #677: fix critical Chinese-audit issues (i18n, @ranydb) MrMasterbay 2026-08-09 19:47:01 +02:00
  • 50d77140f5 fix(vm): container disks use mpN mountpoints + reliable unlock fallback MrMasterbay 2026-08-09 18:14:23 +02:00
  • a0ca2a45b4
         Merge fc7fd6872639a538d78879a737f7775f3270d24d into f34c8d3b8ae8812cedda883774939ce978b55dd8 Spyros Psarras 2026-08-09 15:32:37 +00:00
  • fdb893d03f Merge main into Testing: reconcile the PR-guard commit so main stays FF-able MrMasterbay 2026-08-09 15:00:17 +02:00
  • f34c8d3b8a ci: auto-retarget external PRs opened against main onto Testing MrMasterbay 2026-08-09 14:34:08 +02:00
  • 286432d88e ci: auto-retarget external PRs opened against main onto Testing MrMasterbay 2026-08-09 14:34:08 +02:00
  • 978f0a9701 Merge main into Testing: OIDC username-collision fix (#651, @rmalchow) MrMasterbay 2026-08-09 14:23:13 +02:00
  • 48877f41db
         Merge pull request #651 from rmalchow/fix/486-oidc-username-truncation Nico Schmidt 2026-08-09 14:18:04 +02:00
  • 05075d6dd9
         Merge pull request #676 from ranydb/fix/language-switcher-translation-context Nico Schmidt 2026-08-09 14:07:20 +02:00
  • b94340bfef fix(i18n): address critical Chinese audit issues yanjunpu 2026-08-09 17:31:07 +08:00
  • d7f46bc395 feature: Build ARM64 / aarch64 hw arch artifacts (#674) gyptazy 2026-08-08 19:11:49 +02:00
  • c995284124 ci(docker): harden the Testing docker workflow (daily security scan) mkellermann97 2026-08-09 08:46:02 +02:00
  • c4a2e0faff
         feature: Build ARM64 / aarch64 hw arch artifacts gyptazy 2026-08-08 19:11:49 +02:00
  • cebadfd045 fix(i18n): provide translator to language switcher yanjunpu 2026-08-09 13:36:33 +08:00
  • 57e20e16e9
         Merge pull request #670 from ranydb/feat/simplified-chinese-i18n Nico Schmidt 2026-08-08 21:42:52 +02:00
  • 2b4d327d74 feat(i18n): add Simplified Chinese support yanjunpu 2026-08-08 12:36:40 +08:00
  • df09fe22a6 ci(docker): build a dev image on every Testing push MrMasterbay 2026-08-08 19:42:40 +02:00
  • a564680a52 fix PEGAPROX_NO_GEVENT Simon Smith 2026-08-08 15:35:49 +00:00
  • fc7fd68726 fix(ui): address review on the #189 mobile layer Spyros Psarras 2026-08-08 10:49:59 +02:00
  • 8d31f513d8 fix(ui): usable phone layout - drawer sidebar, no overlapping bars (#189) Spyros Psarras 2026-08-08 10:11:51 +02:00
  • f24c5a5d65 fix(test): model an empty ssh_key on the fake BMC manager (#609 CI) MrMasterbay 2026-08-08 02:00:45 +02:00
  • 26b313d94b fix(hardware): fall back to key/password SSH for the in-band BMC read (#609) MrMasterbay 2026-08-08 01:27:00 +02:00
  • 63ce5de69d fix(v2p): refresh a stale ESXi session before the migration plan/start MrMasterbay 2026-08-07 18:20:12 +02:00
  • 77bfe71d98 security: enforce authz/validation gaps from the Aikido Testing-branch pentest (batch 2/2) MrMasterbay 2026-08-07 17:31:57 +02:00
  • 35d40781bd security: enforce authz gaps from the Aikido Testing-branch pentest (batch 1/2) MrMasterbay 2026-08-07 15:31:13 +02:00
  • e69e331691
         fix(security): Replaced hardcoded root password with unique randomly-generated credentials and forced password change on first login. aikido-autofix[bot] 2026-08-07 12:59:40 +00:00
  • 859ed7ca8f
         fix(security): Fixed privilege escalation vulnerability in user management APIs by restricting permission delegation to only those permissions the caller possesses. aikido-autofix[bot] 2026-08-07 12:56:49 +00:00
  • 927ccec2bf
         fix(security): Fixed authorization bypass vulnerability in backup restore endpoints by adding user_can_access_vm() permission checks. aikido-autofix[bot] 2026-08-07 12:56:28 +00:00
  • a4eee04c1d
         fix(security): Fixed VMware VM ACL bypass by enforcing token-scoped effective_role in authorization checks and standardizing user object construction across all VMware routes. aikido-autofix[bot] 2026-08-07 12:56:20 +00:00
  • 80c2f640e5
         fix(security): Added VM-level access validation to schedule creation, update, and execution endpoints to prevent authorization bypass. aikido-autofix[bot] 2026-08-07 12:55:22 +00:00
  • e3c5a7f4be
         fix(security): Fixed credential exfiltration vulnerability by clearing preserved passwords on host/port changes and adding validation to prevent connections with empty credentials. aikido-autofix[bot] 2026-08-07 12:55:22 +00:00
  • e885d39564
         fix(security): Fixed broken object-level authorization (BOLA) vulnerability in VMware server update and delete routes by enforcing per-server tenant access checks. aikido-autofix[bot] 2026-08-07 12:55:20 +00:00
  • 0afecfd511
         fix(security): Fixed credential exfiltration vulnerability in BMC endpoint updates by requiring explicit password entry instead of accepting masked passwords. aikido-autofix[bot] 2026-08-07 12:55:10 +00:00
  • 2aba57cc36
         fix(security): Fixed unauthorized VM disk migration vulnerability by storing user context and enforcing per-VM authorization checks in the auto-balance worker. aikido-autofix[bot] 2026-08-07 12:55:00 +00:00
  • 93fe622fdb
         fix(security): Fixed privilege escalation vulnerability in custom-role permission validation by comparing actual permissions instead of relying on flawed tier-level fallback. aikido-autofix[bot] 2026-08-07 12:54:39 +00:00
  • 9c56d4fe98
         fix(security): Fixed OIDC subject verification and privilege assignment to prevent account takeover and stale privilege preservation in pegaprox/utils/oidc.py and pegaprox/utils/ldap.py. aikido-autofix[bot] 2026-08-07 12:54:29 +00:00
  • af6f24db2d
         fix(security): Fixed tenant boundary bypass vulnerability by validating tenant-scoped admin role assignments before auto-reassociation logic in pegaprox/api/users.py aikido-autofix[bot] 2026-08-07 12:54:27 +00:00
  • 00f7ce63aa
         fix(security): Fixed privilege escalation vulnerability in groups API that allowed authenticated non-admin users with admin.groups permission to modify global cluster groups by enforcing strict tenant validation. aikido-autofix[bot] 2026-08-07 12:54:22 +00:00
  • 185f6e723a
         fix(security): Fixed cross-tenant authorization bypass by restricting tenant creation to global administrators only in pegaprox/api/users.py aikido-autofix[bot] 2026-08-07 12:54:22 +00:00
  • 71867b8d78
         fix(security): Added check_cluster_access validation to prevent authorization bypass in PBS storage configuration operations. aikido-autofix[bot] 2026-08-07 12:53:58 +00:00
  • 96a43f22a6 fix(migrations): route the ESXi + cross-hypervisor migration lists to their handlers (#654) MrMasterbay 2026-08-06 21:30:06 +02:00
  • 54a8f3ca9d fix(console): hold Shift when pasting shifted symbols into the VNC console (#653) mkellermann97 2026-08-06 15:20:17 +02:00
  • bdac211d56 fix(ui): rotate the chevron on the Advanced Settings panel when open (#652) mkellermann97 2026-08-06 09:41:52 +02:00
  • 2ca4804872 fix(update): scheduled rolling updates evacuate local disks by default (#630) MrMasterbay 2026-08-06 08:22:16 +02:00
  • 8c22bc7084 deps: trim requirements.txt comments MrMasterbay 2026-08-06 07:19:45 +02:00
  • 2d4c2a29bf deps: raise cryptography floor to 50 (pin the vulnerable 49 out) MrMasterbay 2026-08-06 07:16:28 +02:00
  • bf21a12b33 deps: bump pyopenssl floor to 26.4.0 so cryptography can move to 50 (#650) MrMasterbay 2026-08-06 07:07:10 +02:00
  • 9bb78ebb7a oidc(#486): bind the legacy-username fallback to the same subject ruben 2026-08-05 15:36:45 +02:00
  • 3f00e828ec oidc(#486): keep the full preferred_username instead of truncating at '@' ruben 2026-08-05 15:09:14 +02:00
  • bfb10272aa fix(maintenance): honour local-disk evacuation on the maintenance-mode paths (#629) mkellermann97 2026-08-05 09:42:35 +02:00
  • c6d9fd63c9
         fix(security): update cryptography from 49.0.0 to 50.0.0 aikido-autofix[bot] 2026-08-05 00:47:27 +00:00
  • df4633d828 fix(ui): keep the task-bar restore toggle up the whole time the bar is hidden (#648, #649) MrMasterbay 2026-08-04 15:39:50 +02:00
  • 425b2c6302 fix(ui): restore the task-bar toggle button (#648) mkellermann97 2026-08-04 15:31:04 +02:00
  • c798fd987c feat(console): surface SPICE in every VM console entry point + i18n mkellermann97 2026-08-04 15:05:44 +02:00
  • 651a1b667f fix showing taskbar icon Simon Smith 2026-08-04 13:05:38 +00:00
  • 62c3024c49 feat(console): SPICE console alongside noVNC (downloadable virt-viewer .vv) mkellermann97 2026-08-04 11:53:11 +02:00
  • 2cb411ce71 fix(sensors): parse plain 'sensors' text when 'sensors -j' JSON is unavailable (#601) mkellermann97 2026-08-04 09:21:37 +02:00
  • fd66e3a3c3 fix(rbac): gate storage/snapshot/backup/update UI on their backend perms mkellermann97 2026-08-04 09:06:41 +02:00
  • cbb342ead3 revert(ui): keep the Austrian flag for German — it is intentional mkellermann97 2026-08-03 18:05:05 +02:00
  • 6a3481a2d8 fix(ui): storage action bar follows storage.* perms (#644) + German flag (#645) mkellermann97 2026-08-03 17:18:36 +02:00
  • d54e6e0c32 fix(console): keep the VNC websocket alive through a transient hub stall mkellermann97 2026-08-03 17:18:36 +02:00
  • 6c945697e7 fix(console): stop intermittent "No access to cluster" on node SSH consoles mkellermann97 2026-08-03 17:18:36 +02:00
  • 7b6bbc5e46 fix(repl): keep the intermediate clone on the source storage (#641) mkellermann97 2026-08-03 11:42:26 +02:00
  • b6d4154961 fix(esxi): keep the configured port in VM console URLs (#640) mkellermann97 2026-08-02 23:38:44 +02:00
  • ac9bcb6052 release: bump the README version badge to 1.0 v1.0 MrMasterbay 2026-08-01 13:25:07 +02:00
  • 78a6cf777e tests(#633): scope the root euid-skip per-test, not whole-module mkellermann97 2026-08-01 10:33:21 +02:00
  • 64fa9c0f11 release: complete the 1.0 update manifest mkellermann97 2026-08-01 10:33:21 +02:00
  • 1309008e80 multi-sdn(#612): harden cross-cluster EVPN after a deep review mkellermann97 2026-08-01 10:04:58 +02:00
  • c8e49e05cd deps: floor pyopenssl at 26.3.0 (26.0-26.2 crash on cryptography 49) mkellermann97 2026-08-01 09:21:19 +02:00