GeezerVison

Pull requests

• fix/rbac: Change Prometheus' defaults, privileged: false, and scope discovery down to the same namespace

  #1015·marcleblanc2 opened Nov 12, 2026Contributor·

  ·
  1

• (promote) release: build v8.2.0

  #1013·michaellzc opened Nov 11, 2026Member·

  ·
  2

• (internal) release: build v8.2.0

  #1010·sourcegraph-bot-2 opened Nov 11, 2026Collaborator·

  ·
  3

• Render sourcegraph.labels on every object, and add storage and ServiceAccount labels

  #1008·marcleblanc2 opened Nov 11, 2026Contributor··1 of 3 tasks·

  ·
  1

• Add opt-in selector labels to adopt existing workloads

  #1007·marcleblanc2 opened Nov 11, 2026Contributor··2 of 3 tasks·

  ·
  2

• fix/redis: set Redis endpoints on the code-intel workers

  #1004·marcleblanc2 opened Nov 11, 2026Contributor·2 of 3 tasks·

  ·
  3

• sourcegraph: read-only root filesystem for blobstore, cadvisor, otel, and pgsql-exporter

  #1003·marcleblanc2 opened Nov 11, 2026Contributor·

  ·
  1

• fix/observability: Prometheus read only root volume

  #1000·marcleblanc2 opened Nov 11, 2026Contributor·

  ·
  1

• Add runtimeClassName to support sandboxed runtimes

  #999·marcleblanc2 opened Nov 10, 2026Contributor·

  ·
  1

• sourcegraph: run DB permission init containers on the DB images

  #997·keegancsmith opened Nov 10, 2026Member·

  ·
  1

• Add standard SECURITY.md

  #990·marcleblanc2 opened Oct 31, 2026Contributor·

  ·
  1

• Standardize health probes with shared helpers

  #971·marcleblanc2 opened Oct 20, 2026Contributor·1 of 3 tasks·

  ·
  1

  1

• chore: update dependencies

  #970·marcleblanc2 opened Oct 20, 2026Contributor·5 of 6 tasks·

  ·
  1

• Add standalone pgsql-exporter for external databases

  #969·marcleblanc2 opened Oct 20, 2026Contributor·2 of 3 tasks·

  ·
  1

  2

• ci(checkov): silence errors on forks

  #968·marcleblanc2 opened Oct 20, 2026Contributor·

  ·
  1

• release.yaml: share duplicated steps with YAML anchors

  #955·marcleblanc2 opened Sep 30, 2026Contributor·

  ·
  1

• scripts/helm-docs.sh: add --check, fail only on README diffs

  #954·marcleblanc2 opened Sep 30, 2026Contributor·

  ·
  1

• executor/k8s: create a dedicated ServiceAccount for job pods

  #951·marcleblanc2 opened Sep 29, 2026Contributor·

  ·
  1

• sourcegraph-executor/k8s: opt-in CronJob to clean up orphaned executor job resources

  #923·marcleblanc2 opened Aug 20, 2026Contributor·

  ·

• fix(executor): render tolerations as json

  #902·jojosenthusiast opened Jun 29, 2026·

  ·
  1

• Add conditional internal registry port (5000) to frontend service

  #869·michaellzc opened May 22, 2026Member·3 tasks·

  ·

• prometheus: enable readOnlyRootFilesystem

  #858·marcleblanc2 opened Apr 24, 2026Contributor·

  ·

• Create global container and pod security context configs

  #818·marcleblanc2 opened Feb 4, 2026Contributor·1 of 3 tasks·

  ·
  1

• Chore: Reorganize files for maintainability

  #780·marcleblanc2 opened Dec 8, 2025Contributor·1 of 3 tasks·

  ·

• feat: otel tolerations for helm chart

  #686·Chickensoupwithrice opened May 23, 2025Contributor·1 of 3 tasks·

  ·