SwissDataScienceCenter / renku-data-services

86%

main: 86%

LAST BUILD ON BRANCH v0.76.0

branch: v0.76.0

CHANGE BRANCH

x

Reset

• v0.76.0
• 000-add-copied-and-migrated-project-metrics
• 000-add-metadata-to-resumed-session-metrics
• 1129-rename-group-slug-does-not-update-search
• 649-fix-copy-project
• Feat/Move-Resource-Pool-Authorization-To-Authzed
• add-alert-service
• add-alertmanager-integration
• add-capacity-reservation-system
• add-deposit-job
• add-pycharm-pytest-config
• andrea/add-projects-migrated
• andrea/add-search-counts
• andrea/add-user-preferences-for-dismiss-project-migration
• andrea/fix-patch-image-secret
• andrea/fix-total-groups-in-all-group
• andrea/get-all-migrations
• andrea/oauth-callback-error-redirect
• andrea/support-private-images
• archive-envs
• build-project-authz-disentangle
• build/acpm-poc
• build/consistent-logging-format
• build/decouple-gitlab
• build/doi-in-data-connector-project-links
• build/external-resources-2
• build/external-resources-cleanups
• build/external-resources-cluster-entities
• build/external-resources-demo
• build/feat-self-mint-tokens
• build/group-page-search-features
• build/handle-private-images-from-gitlab
• build/pagination-for-get-data-connector-project-links
• build/private-images
• build/redirects
• build/resource-quotas
• build/resource-quotas-enforcement
• build/resource-quotas-fix
• build/resource-quotas-notification
• build/session-secrets
• build/support-build-arm
• build/support-remote-sessions-hpc
• bump-dependencies
• bump-sanic-ext
• bump-schemathesis
• chore-add-coding-guidelines
• chore-add-linting-rules-20250528
• chore-add-pr-template
• chore-add-samuel-salim-codeowners
• chore-add-solr-migration-tests
• chore-broken-tests-sentry-logging
• chore-fix-devcontainer-k9s-cli-feature
• chore-improve-makefile
• chore-improve-makefile-2
• chore-narrower-security-context-for-sessions
• chore-reduce-db-conn-pool-size
• chore-remove-additional-secret-validation
• chore-remove-unused-code-to-20241210
• chore-run-data-services-with-single-process
• chore-run-server-in-single-process
• chore-run-single-process-secret-service
• chore-run-solr-from-container
• chore-switch-to-azure-dev
• chore-update-actions-to-1.18.1
• chore-update-amalthea-schemas
• chore-update-renku-action-c1.14.0
• chore-update-renku-action-v1.14.0
• chore-update-renku-action-v1.14.2
• chore-update-renku-action-v1.15.0
• chore-update-renku-action-v1.16.0
• chore-update-to-new-acceptance-tests
• chore-upgrade-renku-actions-1.22.1
• chore-use-kind-in-test
• ciyer/amalthea-runai
• ciyer/autostart-banner
• ciyer/group-authz
• ciyer/list-all-migrations
• ciyer/redirects
• ciyer/resource_quotas
• ciyer/return_resource_limit_total
• ciyer/session-env-vars
• ciyer/session-env-vars-fixes
• ciyer/session-start-env-vars
• ciyer/usage-available-rename
• cloudstorage-in-workdir
• copy-project-documentation
• copying-project-with-built-environments
• data-svc-k8s-watcher
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.14.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.15.1
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.16.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.17.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.18.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.18.2
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.19.1
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.20.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.21.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.22.0
• dependabot/github_actions/SwissDataScienceCenter/renku-actions-1.23.1
• dependabot/github_actions/actions/cache-5
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/azure/aks-set-context-5
• dependabot/github_actions/azure/login-3
• dependabot/github_actions/docker/login-action-4
• dependabot/github_actions/docker/metadata-action-6
• dependabot/github_actions/docker/setup-qemu-action-4
• dependabot/github_actions/github/codeql-action-4
• dependabot/github_actions/peter-evans/create-or-update-comment-5
• dependabot/github_actions/peter-evans/find-comment-4
• dependabot/pip/poetry-04d8eb7f7e
• dependabot/pip/poetry-834aac31ad
• dependabot/pip/poetry-882466b6bd
• dependabot/pip/projects/renku_data_tasks/h11-0.16.0
• dependabot/pip/urllib3-2.6.0
• dependencies-background-jobs-k8s-watcher
• dependencies-remove-lazy-init
• document-add-env-vars-528
• eikek/931-entity-removal-search
• eikek/amalthea-template-data
• eikek/background-process-deployment
• eikek/build/integration-improvements
• eikek/build/resource-usage-data
• eikek/build/session-last-interaction
• eikek/cooldown
• eikek/ensure-solr-cores
• eikek/feat/dockerhub-private-images
• eikek/fix-admin-usage
• eikek/fix-failing-tests2
• eikek/fix-project-search-update
• eikek/fix-query-parser
• eikek/fix-search-project-dc
• eikek/fix-solr-devcontainer
• eikek/fix/1060-session-secret-missing
• eikek/fix/1127-session-cr-leak
• eikek/fix/1146-fernet-decryption-fail
• eikek/fix/1160-search-with-dash
• eikek/fix/connect-errors
• eikek/fix/github-provider
• eikek/fix/private-images
• eikek/fix/schemathesis
• eikek/fix/stale-read-refresh-token
• eikek/improve-logging-setup
• eikek/multiple-jobs-per-launcher
• eikek/non-interactive-session
• eikek/parallel-publish
• eikek/project-copies-index
• eikek/remove-dc-project-ref
• eikek/reprovision-on-start
• eikek/request-id-logging
• eikek/resource-request-user-query
• eikek/s3-endpoint-fix
• eikek/search-data-connector
• eikek/search-dc-project-namespace
• eikek/search-global-dcs
• eikek/search-query
• eikek/search-query-manual
• eikek/search-scenarios
• eikek/search-sync
• eikek/session-launcher-type
• eikek/solr-models
• eikek/solr-startup
• eikek/support-solr-10
• eikek/testing
• eikek/update-flake
• emtpy-head
• feat-add-endpoint-to-get-v1-project-properties
• feat-add-jupyter-buildpack
• feat-add-missing-dc-namespace-endpoint
• feat-add-project-as-dc-owner-pt2
• feat-add-project-as-dc-owner-pt3
• feat-add-project-as-dc-owner-pt4
• feat-add-project-as-dc-owner-pt5
• feat-add-project-as-dc-owner-pt6
• feat-add-project-as-dc-owner-pt7
• feat-add-project-as-dc-owner-pt8
• feat-add-service-account-name-to-pools
• feat-extend-image-check-endpoint
• feat-limit-project-group-creation-to-admins
• feat-publish-zenodo-datasets
• feat-run-notebooks-service
• feat/add-group-and-projects-to-resource-pool-authz
• feat/amalthea-session-ingress-classname
• feat/authz-resource-pools-feature-parity
• feat/buildstrategy-image-extension
• feat/custom-rclone-doi
• feat/git-https-proxy
• feat/implement-private-registry-image-pull
• feat/k8s-client-merge
• feat/label-anonymous-sessions
• feat/move-resource-pools-check-to-authz
• feat/private-image-build
• feat/r-related-variants
• feat/resource-pool-authz-api
• feat/support-insecure-registries-for-image-push
• feature/alerts
• feature/search-migration
• fix-add-hibernation-thresholds-from-resource-pool
• fix-add-memory-limits-to-all-sessions
• fix-add-missing-slug-constraints
• fix-add-server-default-to-migration-banner-field
• fix-add-vendor-field-for-polybox-webdav-provider
• fix-add-vendor-for-polybox-and-switchdrive
• fix-apispec-merge
• fix-as-casing-on-dockerfiles
• fix-authentication-container-certificates
• fix-buildrun-status-failed
• fix-cache-watching-buildruns
• fix-cloning-repos-token-exchange-urls
• fix-cluster-default-tls-cert-in-sessions
• fix-copy-data-connector-links-when-copying-projects
• fix-creating-cluster-with-non-unique-name
• fix-creating-image-pull-secret
• fix-creation-timestamp
• fix-delete-anon-sessions-quickly-after-hibernating
• fix-do-not-apply-internal-defaults-for-culling
• fix-do-not-delete-project-when-dc-is-deleted
• fix-do-not-skip-k8s-cache
• fix-duplicate-the-in-docstring
• fix-environment-args-setup
• fix-expired-kc-tokens-in-tasks
• fix-failing-manifest-resources-parsing
• fix-finding-data-connectors-by-slug-v2
• fix-finding-dcs-by-slug
• fix-flickering-sessions-on-deletion
• fix-git-clone-mount-path-v1-sessions
• fix-handle-httpx-read-error-in-k8s-watcher
• fix-handle-missing-solr-core
• fix-idle-times
• fix-imports-in-test-suites
• fix-improve-k8s-cache-efficiency
• fix-k8s-watcher-bandit
• fix-k8s-watcher-push
• fix-keycloak-algorithms
• fix-loading-kube-configs
• fix-make-secret-service-patch-on-conflict
• fix-metrics-anonymous-indication
• fix-migrate-copied-projects-environments
• fix-missing-status-field-in-k8s-watcher
• fix-move-prometheus-multiproc-dir-to-tmp
• fix-patch-session-resources
• fix-patching-session-resources
• fix-propagate-project-moves-to-dcs
• fix-properly-handle-unknown-buildrun-status
• fix-relax-container-image-validation
• fix-resource-query-usage-slow
• fix-rstudio-frontend-variant-requires-stripped-prefix
• fix-s3-customization
• fix-send-authenticated-flag-to-posthog
• fix-session-patching
• fix-session-sync
• fix-session-url-path
• fix-set-memory-limits-when-patching
• fix-solr-keywords-field-reindex
• fix-swagger-page-search-reprovisioning
• fix-sync-k8s-caches
• fix-turn-off-user-identify-events
• fix-unhandled-cancelled-error
• fix-update-poetry-devcontainer
• fix-upgrade-buildpacks-0.0.6
• fix-upgrade-kr8s
• fix-uppercase-characters-validation-in-namespaces
• fix-uppsercase-characters-in-slug-responses
• fix-urllib-k8s-client-conflicts
• fix-urllib-k8s-client-conflicts-v2
• fix-use-correct-gid-uid
• fix-use-ingress-class-name-from-config
• fix-user-list-permissions
• fix-using-nb-config-fallback-for-culling
• fix/decouple-authz-from-k8s-watcher
• fix/dont-create-private-image-pull-secret
• fix/error-message-for-frontend-variant
• flaky-schemathesis
• get-clusters-changes
• initial-envs
• k8s-watcher-in-notebooks
• kpack-resources
• leaft/fix-renku-1-secret-filenames
• leafty-build-push-action
• leafty/852-tests
• leafty/854-fix-bad-project-namespace
• leafty/859-fix-dc-no-slug
• leafty/974-gh-enterprise-server
• leafty/975-add-sentry-release
• leafty/982-no-v1-sessions
• leafty/add-disk-size-session-envs
• leafty/add-generic-oidc-integration
• leafty/add-sentry-k8s-watcher
• leafty/add-session-env-vars
• leafty/add-shipwright-source-options
• leafty/add-ttyd-option
• leafty/allow-list-rclone
• leafty/allow-project-slug-update
• leafty/build-oauth-data-connectors
• leafty/buildrun-logs
• leafty/buildruns-cache
• leafty/check-image-platforms
• leafty/clean-add-remote-resource-pool
• leafty/cleanup-providers
• leafty/configure-arm-builds
• leafty/configure-buildpacks
• leafty/cscs-firecrest-poc
• leafty/define-buildrun-retention
• leafty/dependabot/github_actions/github/codeql-action-4
• leafty/doi-fix-keywords
• leafty/exp-dev-naming
• leafty/exp-tests
• leafty/feat-1009-allow-dc-skip
• leafty/feat-1213-public-repository-response
• leafty/feat-add-support-rclone-doi
• leafty/feat-dc-add-on-resume
• leafty/feat-dc-in-remote-sessions
• leafty/feat-launch-remote-sessions-clean
• leafty/feat-resource-class-platforms
• leafty/feat-self-mint-authenticator
• leafty/feat-self-mint-tokens
• leafty/feat-tune-doi-mounts
• leafty/feat-verify-scope
• leafty/fix-1005-buildrun
• leafty/fix-1033-intersect-node-affinities
• leafty/fix-1047-identify-users
• leafty/fix-1079-ini-interpolation
• leafty/fix-1082-await-ns
• leafty/fix-1096-copy-secret-slots
• leafty/fix-1104-upsert-secrets-session-resume
• leafty/fix-1112-posthog
• leafty/fix-1130
• leafty/fix-1152-global-images
• leafty/fix-1157
• leafty/fix-1163
• leafty/fix-1167-webdav
• leafty/fix-1209-session-not-found
• leafty/fix-1278-st
• leafty/fix-1289
• leafty/fix-576
• leafty/fix-580
• leafty/fix-613
• leafty/fix-712-git-repositories
• leafty/fix-917
• leafty/fix-921
• leafty/fix-936
• leafty/fix-941
• leafty/fix-951
• leafty/fix-963-remove-sftp-options
• leafty/fix-amalthea-reset-crd
• leafty/fix-bash-run
• leafty/fix-build-from-code
• leafty/fix-clashing-mount-points
• leafty/fix-cloudstorage-in-workdir
• leafty/fix-cpu-quantity
• leafty/fix-cpu-req-issue
• leafty/fix-doi-tests
• leafty/fix-doi-tests-2
• leafty/fix-gh-action
• leafty/fix-image-check-private-build
• leafty/fix-k8s-watcher
• leafty/fix-pc-resume-1287
• leafty/fix-pre-commit-hook
• leafty/fix-prev-sessions-interactive-label
• leafty/fix-print
• leafty/fix-project-etag
• leafty/fix-quiet-404
• leafty/fix-session-env-api
• leafty/fix-session-order
• leafty/fix-sftp-host
• leafty/fix-sftp-test-connection
• leafty/fix-user-full-sync
• leafty/fix-users-api
• leafty/log-build-run-failed
• leafty/logs-pod-initializing
• leafty/refactor-crc
• leafty/refactor-reset
• leafty/remote-pool-add-config-2
• leafty/revert-dev-name
• leafty/session-api-proxy
• leafty/session-builds-api
• leafty/session-secrets-7
• leafty/test-devcontainer
• leafty/update-action
• leafty/update-bp
• leafty/update-crc-k8s-selectors
• leafty/update-devcontainer
• leafty/update-ph
• leafty/update-rclone-1-69
• leafty/update-rclone-1.69.2
• leafty/update-rclone-1.69.3
• leafty/update-rclone-1.70.0
• leafty/update-rclone-schema-doc
• leafty/update-sanic-1159
• leafty/upgrade-rclone-1.72.1
• leafty/urgent-codeowners
• leafty/use-internal-tokens-git-clone
• lorenzo/fix-acceptance-job
• lorenzo/ingore-vscode-folder
• lorenzo/relax-permissions-getbuild
• lorenzo/single_table_global_connectors
• lorenzo/update-ci
• main
• metrics-build
• nix-setup-update
• non-empty-list-changes
• notebooks-catchup-1
• notebooks-catchup-2
• notebooks-catchup-3-cloud-storage
• notebooks-catchup-4-pr-1984
• notebooks-catchup-7-1923
• olevski/feat-add-option-to-strip-prefix
• olevski/fix-delete-if-secret-already-exists
• olevski/fix-more-explicit-errors
• olevski/fix-pinned-project-validation
• olevski/fix-set-image-pull-policy
• olevski/fix-use-robust-query-validation
• olevski/fix-will-delete-at-timestamp
• olevski/handle-bad-refresh-token-in-connectors
• olevski/handle-missing-pod-when-getting-logs
• pinned-slug-regex
• pitch/connect-renkulab-and-openbis-datasets
• pitch/copy-projects-message
• pitch/custom-environment-build
• pitch/staging-table
• posthog-metrics
• private-resource-permission
• product-metrics-k8s-cache
• python-3.13
• refactor-bg-jobs-to-data-tasks
• refactor-configs
• refactor-rclone-patches
• remove-ide-file
• remove-notebooks-datasvc-calls
• remove-user-folder
• remove-v1-code
• revert-kr8s-20.7-update
• salimkayal-feat-resource-pools-access-through-integration
• salimkayal-feat-resource-pools-authz-for-groups-and-projects
• salimkayal-feat-sync-rp-access-on-oauth2-connect-disconnect
• sambuc-test-azure
• sambuc/test-azure
• search-feature-flag
• search-metrics
• sgaist/935-forbbid-cluster-change
• sgaist/kpack-resources
• shipwright-new-cache
• snapshot-tests
• snyk-scanning
• stop-sending-redis-queue-messages
• test-deploy-branch-wes-2025-06-18
• undo-order-changes-in-apispec
• update-email
• update-kr8s-0-20-7
• v0.0.1
• v0.0.2
• v0.0.3
• v0.1.0
• v0.1.1
• v0.10.0
• v0.11.0
• v0.13.0
• v0.14.0
• v0.14.1
• v0.15.0
• v0.15.1
• v0.16.0
• v0.16.1
• v0.17.0
• v0.18.0
• v0.19.1
• v0.2.0
• v0.2.1
• v0.2.2
• v0.2.3
• v0.20.0
• v0.21.0
• v0.22.0
• v0.23.0
• v0.24.0
• v0.24.1
• v0.24.2
• v0.25.0
• v0.26.0
• v0.27.0
• v0.27.1
• v0.28.0
• v0.29.0
• v0.3.0
• v0.30.0
• v0.31.0
• v0.31.1
• v0.32.0
• v0.33.0
• v0.34.0
• v0.35.0
• v0.35.1
• v0.35.2
• v0.36.0
• v0.37.0
• v0.37.1
• v0.38.0
• v0.39.0
• v0.4.0
• v0.40.0
• v0.41.0
• v0.42.0
• v0.43.0
• v0.43.1
• v0.43.2
• v0.44.0
• v0.45.0
• v0.46.0
• v0.47.0
• v0.47.1
• v0.48.0
• v0.48.1
• v0.49.0
• v0.5.0
• v0.5.1
• v0.5.2
• v0.50.0
• v0.51.0
• v0.52.0
• v0.53.0
• v0.53.1
• v0.53.2
• v0.54.0
• v0.55.0
• v0.56.0
• v0.57.0
• v0.58.0
• v0.59.0
• v0.6.0
• v0.60.0
• v0.60.1
• v0.60.2
• v0.60.3
• v0.60.4
• v0.60.5
• v0.61.0
• v0.62.0
• v0.63.0
• v0.64.0
• v0.65.0
• v0.65.1
• v0.66.0
• v0.67.0
• v0.67.2
• v0.68.0
• v0.68.1
• v0.69.0
• v0.7.0
• v0.70.0
• v0.71.0
• v0.71.1
• v0.71.2
• v0.72.0
• v0.72.1
• v0.72.2
• v0.72.3
• v0.73.0
• v0.73.1
• v0.74.0
• v0.74.1
• v0.75.0
• v0.8.0
• v0.8.1
• v0.8.2
• v0.8.3
• v0.9.0
• validate-docker-names

Build # 26756290514

Build Type

push

github

Committed by web-flow

Commit Message

feat: limit project group creation to admins (#1331)

Make it so that (if configured) admins are the only one allowed to
create projects and groups. By default we have the old behavior so that
everyone who is logged in can create a group or project. The limits are
applied in addition to all other authorization schemes and regardless of
where the project will be created (username or group).

Coverage Stats

132 of 135 new or added lines in 10 files covered. (97.78%)

10 existing lines in 7 files now uncovered.

26951 of 31193 relevant lines covered (86.4%)

1.5 hits per line