Issues

• [Feature] Per-tenant application availability: restrict which application kinds a tenant can create, and show it in the console

  triage/needs-triage
  cozystack/cozystack#5138 · Filter by author ajaykumarmandapati opened on Oct 27, 2026

• ci: backport, pr-size and pr-labeler stop on 2026-12-02, GitHub blocks pull_request_target by default

  area/cikind/cleanuptriage/needs-triage
  cozystack/cozystack#5135 · Filter by author myasnikovdaniil opened on Oct 27, 2026

• mariadb: replicated cluster OOM-killed at the nano preset

  area/databasekind/bugtriage/needs-triage
  cozystack/cozystack#5132 · Filter by author mattia-eleuteri opened on Oct 27, 2026

• SecurityGroup: toFQDNs rules never work with Cilium chained on kube-ovn

  area/ciliumkind/bugtriage/needs-triage
  cozystack/cozystack#5131 · Filter by author mattia-eleuteri opened on Oct 27, 2026

• SecurityGroup: port ranges and malformed FQDNs are rejected with misleading errors

  area/networkingkind/bugtriage/needs-triage
  cozystack/cozystack#5130 · Filter by author mattia-eleuteri opened on Oct 27, 2026

• SecurityGroup: membership-only group projects to a CiliumNetworkPolicy that Cilium 1.19 marks invalid

  area/networkingkind/bugtriage/needs-triage
  cozystack/cozystack#5129 · Filter by author mattia-eleuteri opened on Oct 27, 2026

• TenantGateway DNS-01 certificate lists a child apex its parent's wildcard covers; Let's Encrypt refuses the order

  triage/needs-triage
  cozystack/cozystack#5125 · Filter by author dafnrs opened on Oct 27, 2026

• harden(marketplace): cozypkg tap re-tap without verify flags applies unverified PackageSources when the source has a cosign policy

  area/platformkind/bugsecuritytriage/needs-triage
  cozystack/cozystack#5113 · Filter by author IvanHunters opened on Oct 26, 2026

• api: opt-in single-attempt failure policy for Application HelmReleases, with a terminal status

  kind/featuretriage/needs-triage
  cozystack/cozystack#5109 · Filter by author scooby87 opened on Oct 26, 2026
  1

• Changing a platform value upgrades every app and re-runs their Jobs although the render is unchanged

  triage/needs-triage
  cozystack/cozystack#5092 · Filter by author mattia-eleuteri opened on Oct 24, 2026

• Default tenant Kubernetes control plane does not fit a tenant with resourceQuotas.cpu 24 and deadlocks on creation

  triage/needs-triage
  cozystack/cozystack#5070 · Filter by author yankawai opened on Oct 22, 2026

• cluster-api: bump cluster-api-operator past v0.19 and drop the --sync-period patch

  kind/cleanuptriage/needs-triage
  cozystack/cozystack#5037 · Filter by author myasnikovdaniil opened on Oct 21, 2026
  1

• backupstrategy-controller blocks on a strategy whose pod template has a wrongly typed field

  kind/bugtriage/needs-triage
  cozystack/cozystack#5036 · Filter by author myasnikovdaniil opened on Oct 21, 2026

• flux-plunger: follow-ups from the #4914 review (hook unfence race, per-release budget, test gaps)

  area/platformkind/bugtriage/needs-triage
  cozystack/cozystack#5035 · Filter by author myasnikovdaniil opened on Oct 21, 2026

• workloadmonitor: bucket Workloads carry the bucket- prefix twice

  kind/bugtriage/needs-triage
  cozystack/cozystack#5014 · Filter by author IvanHunters opened on Oct 21, 2026

• Memory without a unit in app resources is applied as bytes

  triage/needs-triage
  cozystack/cozystack#5004 · Filter by author yankawai opened on Oct 20, 2026

• Tenant namespace deleted directly is stuck Terminating on Kamaji finalizers

  triage/needs-triage
  cozystack/cozystack#5002 · Filter by author yankawai opened on Oct 20, 2026

• Pod of one tenant cannot reach the external (LoadBalancer) address of a service of another tenant

  triage/needs-triage
  cozystack/cozystack#4999 · Filter by author myasnikovdaniil opened on Oct 20, 2026
  1

• [Epic] Split cozystack into platform and catalogs: step 0

  area/platformepictriage/needs-triage
  cozystack/cozystack#4982 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• [Epic] Marketplace: fix tap defects in 1.7.x patches

  area/platformepicsecuritytriage/accepted
  cozystack/cozystack#4981 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• fix(marketplace): disconnecting a repository removes its application definitions without checking tenant instances

  area/apiarea/dashboardarea/platformkind/bugpriority/important-soontriage/accepted
  cozystack/cozystack#4980 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• fix(marketplace): a tapped repository follows a mutable tag, so connect should pin a digest

  area/platformkind/bugpriority/important-soonsecuritytriage/accepted
  cozystack/cozystack#4979 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• fix(marketplace): connecting a repository installs its components, and Flux installs them as cluster-admin

  area/platformkind/bugpriority/important-soonsecuritytriage/accepted
  cozystack/cozystack#4978 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• fix(marketplace): artifact names are not checked across PackageSources, and reserved names are checked only by the CLI

  area/platformkind/bugpriority/important-soonsecuritytriage/accepted
  cozystack/cozystack#4977 · Filter by author myasnikovdaniil opened on Oct 20, 2026

• fix(api): a malformed ApplicationDefinition keeps cozystack-api from starting

  area/apikind/bugpriority/important-soontriage/accepted
  cozystack/cozystack#4976 · Filter by author myasnikovdaniil opened on Oct 20, 2026