docs: global update#15
Merged
Merged
Conversation
Sessions were undocumented user-side: nothing said where a session lives, that signing out is global, or that deactivating a user takes effect on their next request rather than in eight hours. Says all of it now, plus what changed with the cookie: the portal keeps no credential in the browser, a reload keeps you signed in, and an SSO round-trip lands on a clean URL. Records the one residual — a desktop connection already open survives revocation, since the tunnel is authorized when it opens.
waas defaults workload placement to waas-{user} in chart 0.3.0. Records
what an existing install inherits: workspaces stay put, retained homes
do not follow, shared namespaces become an explicit opt-in. Adds the
PlacementDenied case the prefix rule now produces.
Placed namespaces now block egress by default (IMDS, RFC1918, hence the kube-apiserver and the platform namespace). Covers the GKE Service-CIDR gap, the extraAllowedCIDRs way out, and the CNI escape hatch.
Nothing in the catalog requires it: the level is the cluster admin's call, and an empty securityContext keeps their add-if-absent mutation policy in charge. Gives the procedure to raise it to restricted.
In-cluster targets are refused at create, update and connect. States the two deliberate exceptions (RFC1918, unresolvable names) and that guacd re-resolving at dial time keeps this a guardrail, not a boundary.
Creating or repointing a WorkspaceImage now syncs at once; the ticker and Sync now cover content republished under an unchanged source, and a zero interval leaves failed syncs unretried.
Both are new chart values; the stream token needs the warning against lengthening it, since it travels in the URL.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.