Search results

feat(platform): propagate operator wildcard certificate to per-tenant ingress controllers

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

area/platformIssues or PRs related to platform infrastructure (bundle, flux, talos, installer)Issues or PRs related to platform infrastructure (bundle, flux, talos, installer)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

Status: Open.

#2820 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

End-to-end / transparent TLS for databases

area/databaseIssues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)Issues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

priority/backlogGeneral backlog priority. Lower than priority/important-longtermGeneral backlog priority. Lower than priority/important-longterm

securitySecurity-related issues and featuresSecurity-related issues and features

triage/acceptedIndicates an issue is ready to be actively worked onIndicates an issue is ready to be actively worked on

Status: Open.

#2816 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

External database exposure via Gateway API TLS-passthrough (SNI)

area/databaseIssues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)Issues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

priority/important-longtermImportant over the long term, but may not be staffed and/or may need multiple releases to completeImportant over the long term, but may not be staffed and/or may need multiple releases to complete

triage/acceptedIndicates an issue is ready to be actively worked onIndicates an issue is ready to be actively worked on

Status: Open.

#2815 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Converge the per-app TLS series and fix the CA / private-key coupling

area/databaseIssues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)Issues or PRs related to managed databases (postgres, mariadb, redis, etcd, kafka, clickhouse)

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next releaseMust be staffed and worked on either currently, or very soon, ideally in time for the next release

securitySecurity-related issues and featuresSecurity-related issues and features

security/triage-neededNeeds security triageNeeds security triage

triage/acceptedIndicates an issue is ready to be actively worked onIndicates an issue is ready to be actively worked on

Status: Open.

#2814 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Operator-provided / shared wildcard certificate for platform and tenant ingress

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

area/platformIssues or PRs related to platform infrastructure (bundle, flux, talos, installer)Issues or PRs related to platform infrastructure (bundle, flux, talos, installer)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

priority/important-longtermImportant over the long term, but may not be staffed and/or may need multiple releases to completeImportant over the long term, but may not be staffed and/or may need multiple releases to complete

triage/acceptedIndicates an issue is ready to be actively worked onIndicates an issue is ready to be actively worked on

Status: Open.

#2812 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Unified TLS certificate and external-exposure model

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

area/platformIssues or PRs related to platform infrastructure (bundle, flux, talos, installer)Issues or PRs related to platform infrastructure (bundle, flux, talos, installer)

epicA large development increment that brings definite value to Cozystack usersA large development increment that brings definite value to Cozystack users

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

Status: Open.

#2811 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

tenant chart: nested namespace labels miss ancestor tenant.cozystack.io/* labels beyond direct parent

Status: Open.

#2810 In cozystack/cozystack;

· IvanHunters opened on Jun 3, 2026

vm-instance: no way to request a static IP / pin an OVN subnet for a VM

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

area/virtualizationIssues or PRs related to virtualization (kubevirt, cdi, vmi, vm-import)Issues or PRs related to virtualization (kubevirt, cdi, vmi, vm-import)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

priority/backlogGeneral backlog priority. Lower than priority/important-longtermGeneral backlog priority. Lower than priority/important-longterm

Status: Open.

#2808 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

cilium hostFirewall (enabled by default) blocks IPv6 Neighbor Discovery

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/bugCategorizes issue or PR as related to a bugCategorizes issue or PR as related to a bug

priority/backlogGeneral backlog priority. Lower than priority/important-longtermGeneral backlog priority. Lower than priority/important-longterm

Status: Open.

#2806 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Make Cilium BGP control plane a first-class LoadBalancer path for Cilium clusters

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

Status: Open.

#2804 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Tenant Kubernetes: make worker VM network MTU configurable for high-speed fabrics

area/kubernetesIssues or PRs related to the tenant Kubernetes appIssues or PRs related to the tenant Kubernetes app

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

Status: Open.

#2802 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026

Tenant Kubernetes worker VMs cap at ~2 Gbit/s pod-to-pod — enable virtio-net multiqueue by default

area/kubernetesIssues or PRs related to the tenant Kubernetes appIssues or PRs related to the tenant Kubernetes app

area/networkingIssues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)Issues or PRs related to networking (ingress, gateway, vpn, metallb, cilium, kube-ovn)

kind/featureCategorizes issue or PR as related to a new featureCategorizes issue or PR as related to a new feature

Status: Open.

#2801 In cozystack/cozystack;

· Aleksei Sviridkin (lexfrei) opened on Jun 3, 2026