Dedicated ServiceAccount for core-ui-middleware (appsuite/support#1592) core-ui-middleware always runs under its own ServiceAccount, and the Kubernetes API token is mounted only when k8sAutoDiscovery needs it (CIS 5.1.5 / 5.1.6) An operator-supplied serviceAccountName is honoured again New serviceAccount.* and automountServiceAccountToken values PodDisruptionBudget for core-ui-middleware (appsuite/support#1568) New pdb.* values render an optional PodDisruptionBudget for the core-ui-middleware serving pods (disabled by default) Pods carry app.kubernetes.io/component (server / updater) so selectors can target the serving tier without matching the updater pod Log unchanged K8s service discovery at debug 2062d9d Fetch discovery meta.json without duplicate slashes 14de31b Follow sentinel master switches in Redis clients 3a559f6 Serve /meta while no merged metadata is stored for the version 458b4a5 Upload assets as a single PUT instead of a multipart upload per file (#57) Render a single serviceAccountName in pod specs 926d9de Skip K8s discovery when k8sAutoDiscovery is disabled 60fe614 Architecture Decision Records 958e5a3 Existence-check fast path so the updater skips re-downloading warm assets e48f7cf SAST hardening — probes, seccomp, ruleset entries, semgrep suppressions a4c0f0f Server-side brand and hostname filtering for /manifests 5eabf17 STORAGE_BACKEND switch to unify the Redis and S3 cache variants 27a5bc4 Updater-driven Redis to S3 storage migration 9741e82 Migrate to @open-xchange/fastify-sdk and replace chai/sinon with vitest db5476b The bundled MinIO sub-chart de8a235 Document the actual /manifests response shape in the OpenAPI spec cb70ab6 Guard upload path against mid-flight versionInfo mutation 0c74bec Move nosemgrep to trailing same-line comment on both redirect sites 9c3fba0 Periodically re-run service discovery on the serving pod e79e43c Refresh lockfile to patched transitive deps for pnpm audit 1e31dc0 Remove liveness health check and use SDK redis helpers 78187bd Serve text/javascript MIME type per RFC 9239 15f01f0 Stop publishing partial versions and exit cleanly on warm-up failure c27b66d Warm CSS referenced only via .css arrays into S3 9e7e454 Architecture Decision Records 958e5a3 Existence-check fast path so the updater skips re-downloading warm assets e48f7cf SAST hardening — probes, seccomp, ruleset entries, semgrep suppressions a4c0f0f Server-side brand and hostname filtering for /manifests 5eabf17 STORAGE_BACKEND switch to unify the Redis and S3 cache variants 27a5bc4 Updater-driven Redis to S3 storage migration 9741e82 Migrate to @open-xchange/fastify-sdk and replace chai/sinon with vitest db5476b The bundled MinIO sub-chart de8a235 Document the actual /manifests response shape in the OpenAPI spec cb70ab6 Guard upload path against mid-flight versionInfo mutation 0c74bec Move nosemgrep to trailing same-line comment on both redirect sites 9c3fba0 Periodically re-run service discovery on the serving pod e79e43c Refresh lockfile to patched transitive deps for pnpm audit 1e31dc0 Remove liveness health check and use SDK redis helpers 78187bd Serve text/javascript MIME type per RFC 9239 15f01f0 Stop publishing partial versions and exit cleanly on warm-up failure c27b66d Warm CSS referenced only via .css arrays into S3 9e7e454
Switchboard