38905 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Wido den Hollander	4816e05938	KVM: add configurable MAC/IP script hook for static ARP/NDP and routes (#13495) ... * KVM: add configurable MAC/IP script hook for static ARP/NDP and routes Introduces a new agent.properties option `vm.network.macip.static` (false by default) that makes BridgeVifDriver invoke on modifymacip.sh on every NIC plug (VM start) and unplug (VM stop). This is very useful in EVPN+VXLAN environments as it can reduce BUM traffic. By setting static ARP/NDP entries bridges can be configured using 'neigh_suppress on' as the ARP/NDP entries are already set statically by CloudStack. Setting 'neigh_suppress on' requires a manual change in the modifyvxlan.sh script as this is not the default behavior. * vxlan: In EVPN mode, disable ARP/NDP learning FRR populates the FDB via BGP EVPN, so kernel data-plane learning is redundant and counterproductive. Static ARP (IPv4) and NDP (IPv6) entries are added on startup of the Instance and remove on shutdown. FRR populates the FDB/neighbor table via control plane, and neigh_suppress tells the kernel bridge to use that information instead of flooding. This will vastly reduce BUM traffic with static ARP/NDP entries.	2026-07-10 11:40:20 +02:00
Wido den Hollander	c46fb70757	vxlan: Update documentation inside modifyvxlan-evpn.sh (#13584) ... This commit does not change any functionality, it merely changes documentation inside the script.	2026-07-10 11:24:27 +02:00
Wei Zhou	8996286a95	Network Extension: Orchestrate external Network devices (#13032) ... This PR introduces and wires a new extension model for external network orchestration in CloudStack, centered on a new extension type: NetworkOrchestrator. It extends the extension lifecycle from cluster-only registration to physical-network registration, adds API support for updating registered extension metadata, and enables automatic offering creation (network and VPC) based on provider-declared supported services and capabilities. It also adds smoke coverage (KVM-only) using a Linux network namespace based implementation. Doc PR: apache/cloudstack-documentation#649 What's new 1) New extension type: NetworkOrchestrator Adds support for creating extensions of type NetworkOrchestrator. Intended to back CloudStack network/VPC operations via an external orchestrator/provider. 2) Register extension with PhysicalNetwork (in addition to Cluster) Extensions can now be registered against a PhysicalNetwork resource. This enables network service provider behavior at physical-network scope, not only cluster scope. 3) Physical network registration details support Registered extension details for PhysicalNetwork are handled similarly to cluster registration details. Supports storing/updating external access metadata (credentials/endpoints/config details). 4) New API: update registered extension Adds API support to update extension registration metadata after registration. Useful for rotating credentials, updating endpoints, and changing external connection properties without re-registering. 5) Offering automation from external provider capabilities Network/VPC offerings can be created with the external network provider using: provider supportedservices per-service service capabilities This allows CloudStack offerings to align with what the external provider actually supports. 6) Network support via generated offerings Using offerings backed by the external provider, networks can be created and operated with supported services/capabilities. Supported operations include (based on provider capabilities): Source NAT Static NAT Port Forwarding Firewall Load Balancing DHCP DNS UserData 7) VPC support via generated offerings Using VPC offerings backed by the external provider, VPCs and tiers can be created and operated with supported services/capabilities. Supported operations include (based on provider capabilities): VPC tier creation/implementation Source NAT in VPC context Static NAT / Port Forwarding / LB on VPC tiers Network ACL association and ACL rule apply paths Related lifecycle/restart/reapply operations 8) Linux network namespace based external implementation Adds/uses a network extension implementation based on Linux network namespaces. Reference implementation: https://github.com/apache/cloudstack-extensions/tree/network-namespace/Network-Namespace 9) Smoke test coverage (KVM-only) Adds smoke tests using the namespace-based extension implementation. Scope includes provider lifecycle, offering creation, network/VPC flows, and key network services. Applicable hypervisor for this smoke suite: KVM.	2026-07-10 08:44:28 +02:00
Yiğit can BAŞALMA	20e9980b60	backup: allow third-party backup provider plugins in configuration (#13332) ... * Fix * fix: validate backup provider plugin via Spring bean instead of allowed list * fix: unused import error * fix: handle missing backup provider gracefully to prevent dashboard failure * fix: handle missing backup provider gracefully in getBackupStorageUsedStats --------- Co-authored-by: Yiğit Can Başalma <yigit.basalma@local>	2026-07-10 08:22:35 +02:00
Abhisar Sinha	ba837fb8a8	Incremental nas backup fixes (#13571) ... * Avoid concurrent deletes modifying the same backup chain in parallel - Backup deletes are serialized by using a per-VM GlobalLock Backup delete checks if it has a live dependent backup not just a live immediate child.	2026-07-10 08:20:19 +02:00
Shawn Edwards	de3656c819	Enhance DHCP functionality by adding lease timeout support (#12410) ... * Enhance DHCP functionality by adding lease time support across various components. Updated DhcpEntryCommand to include lease time, modified VmDhcpConfig to handle lease time, and adjusted related scripts and configurations to accommodate this new parameter. This allows for configurable DHCP lease durations, improving flexibility in network management. * Move dhcp lease timeout to ConfigKey, set it to 'zone' scope, and add some tests. * Refactor DHCP lease timeout tests to pass code standards/remove white space. * add DhcpLeaseTimeout in getConfigKeys() method * Apply suggestion from @weizhouapache --------- Co-authored-by: Wei Zhou <weizhou@apache.org>	2026-07-09 21:57:14 +02:00
Daman Arora	33c3967b6b	Add per-domain OAuth (Google, GitHub) provider support (#12702) ... * Add domain_id to oauth_provider table and VO * Add domain-aware methods to OauthProviderDao * Add domainId parameter to OAuth provider API commands and response * Add domain support to OAuth2AuthManager * Add domain-aware OAuth verification * Add domain support to ListOAuthProvidersCmd and update related tests * fix domain path issue * Add domainId support to OAuth provider * Return domain name and UUID in OAuth provider API responses using ApiDBUtils * Refactor domain ID resolution in VerifyOAuthCodeAndGetUserCmd to improve code clarity * Enhance OAuth2 plugin support for domain-level configuration and authentication checks * Update OAuth2 tests and VerifyOAuthCodeAndGetUserCmdTest * Add method to find OAuth provider by domain with global fallback * Update OAuth provider configuration to use 'domain' instead of 'domainid' in columns and details * Refactor OAuth provider methods to support domain-level queries and enhance user verification * Add caching for access token retrieval in GithubOAuth2Provider * Refactor access token checks in GithubOAuth2Provider to use StringUtils for improved readability and consistency * Refactor null checks to use utility for improved readability and consistency * Update OAuth2UserAuthenticatorTest to include domainId in user verification method * Remove unnecessary blank line and unused imports in OAuth provider command classes * Refactor and cleanup * Remove unnecessary blank lines * Enhance RegisterOAuthProviderCmdTest with additional provider mock data * Remove startup gate from OAuth plugin initialization to support dynamic config toggling * Add strictScope to ConfigKey to disable global fallback for domain-scoped oauth2.enabled * Add domain-scoped provider filtering to listOauthProvider and centralize domain resolution in OAuth2AuthManager * Add External OAuth tab with domain-scoped provider selection to login page * code cleanup * test fix * Handle login page provider visibility * UI cleanup * UI Cleanup * Keep text color consistent * add unit tests * Add Multiple-domain OAuth tests * Refactor as per PR comments * Use idempotent DDL helpers for oauth_provider schema migration * Use global config check for global providers and extract oauthEnabled variable * Make strictScope return null when id is null * Rename verification methods to use 'verifySecretCodeAndFetchEmail' for consistency * Refactor domain handling in OAuth2AuthManagerImpl to use DomainService instead of DomainDao * Enhance domain ID descriptions in OAuth command classes for clarity * Add domain path handling to OAuth provider commands and improve descriptions * Update domain path description in VerifyOAuthCodeAndGetUserCmd to clarify behavior with Domain ID * Replace remove method with expunge in deleteOauthProvider and add corresponding unit test * Add external login label to Login.vue and update i18n locale handling * Fix stale value issue in updateConfiguration response handling in ConfigurationValue.vue * Enhance OAuth login error handling and add unit test for missing parameters * Add validation to reject enabling OAuth provider when plugin is disabled at domain scope * Add domain reassignment support to UpdateOAuthProviderCmd and enhance validation in OAuth2AuthManagerImpl * Add domain ID to OAuth provider arguments in config * Fix condition for OAuth verification URL handling in router * Add domain path to OauthProviderResponse and update UI config to display it * Update config to remove 'secretkey' from columns and details * Add secretkey to details in config and display in DetailsTab * Implement normalization of ROOT domain to null for global OAuth provider handling and add corresponding unit tests * Refactor OAuth plugin domain scope handling to use a centralized method for enabling checks * Add strict scope handling to ConfigKey and update OAuth2AuthManager usage * Implement domain removal listener to clean up OAuth providers on domain deletion * Enhance OAuth tab icons with disabled state styling for better UX * Add domain-specific provider prompt and update OAuth provider handling --------- Co-authored-by: Daman Arora <daman.arora@shapeblue.com>	2026-07-09 16:30:31 +05:30
Vishesh	1400616e71	UI: Fix icon for KMS & ordering in the left side menu (#13568) ... * Fix icon for KMS * Move KMS further down in the left side menu	2026-07-09 12:32:08 +02:00
N/A	333973ab3c	Add xenserver.create.full.clone global setting (#13114) ... * Add xenserver.create.full.clone global setting Adds a StoragePool-scoped boolean ConfigKey mirroring vmware.create.full.clone so XenServer-backed VMs can be deployed as full VDI copies (VDI.copy) instead of always using linked clones (VDI.clone). Default false preserves today's behavior. The per-pool flag flows into the existing PrimaryDataStoreTO.fullCloneFlag through a new dispatch method addFullCloneAndDiskprovisiongStrictnessFlagOnDest that switches on hypervisor type. * Fix HypervisorType dispatch in addFullClone flag helper Replace invalid switch on Hypervisor.HypervisorType (not a Java enum) with equality checks so cloud-engine-storage-datamotion compiles. --------- Co-authored-by: Erki Märks <erma07@users.noreply.github.com>	2026-07-08 16:17:34 +02:00
James Peru Mmbono	42322a59c7	feat(backup): incremental NAS backup support for KVM (#13074) ... Implements incremental backup support for the NAS backup provider on KVM, using QEMU dirty bitmaps and libvirt's backup-begin API. RFC: apache/cloudstack#12899. For large VMs this reduces daily backup storage 80–95% and shortens backup windows from hours to minutes (e.g. a 500 GB VM with moderate writes goes from ~500 GB/day to ~5–15 GB/day after the initial full backup). Signed-off-by: James Peru <jmsperu@gmail.com> Co-authored-by: jmsperu <jmsperu@users.noreply.github.com> Co-authored-by: Abhisar Sinha <63767682+abh1sar@users.noreply.github.com>	2026-07-08 14:06:41 +02:00
Nicolas Vazquez	72197fea6c	[VMware to KVM] Cleanup leftover migrated volumes in case of migration failures (#13151)	2026-07-08 13:07:36 +02:00
Fabricio Duarte	600201a46b	Add KMSWrappedKeyDao as a dependency for the Usage server (#13535)	2026-07-08 11:03:19 +02:00
Pearl Dsilva	f07b7d8c07	Add Guest OS mapping for windows server 2025 on VMware (#12358) ... Co-authored-by: Pearl Dsilva <pearl1954@gmail.com>	2026-07-07 17:21:41 +02:00
slavkap	40b3ef36aa	kvm: Disabled the setting reboot.host.and.alert.management.on.heartbeat.timeout by default (#10111) ... `reboot.host.and.alert.management.on.heartbeat.timeout` has to be disabled. Even the high availability isn't enabled when there is an issue with a storage CloudStack will reboot the host	2026-07-07 17:13:54 +02:00
Davi Torres	f9a9451860	[NAS Backup] Suppress Errors in Disk Usage Calculation that Caused Backup to Fail (#13424)	2026-07-07 15:02:11 +02:00
Abhishek Kumar	89b2b030e0	veeam-control-service: fix vm pagination (#13383) ... Only consider page in pagination for search clause https://ovirt.github.io/ovirt-engine-api-model/4.5/#_pagination Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>	2026-07-07 13:08:58 +02:00
James Peru Mmbono	9f281c4851	NAS backup: resume paused VM on backup failure and fix missing exit (#12822) ... * NAS backup: resume paused VM on backup failure and fix missing exit When a NAS backup job fails (e.g. due to backup storage being full or I/O errors), the VM may remain indefinitely paused because: 1. The cleanup() function never checks or resumes the VM's paused state that was set by virsh backup-begin during the push backup operation. 2. The 'Failed' case in the backup job monitoring loop calls cleanup() but lacks an 'exit' statement, causing an infinite loop where the script repeatedly detects the failed job and calls cleanup(). 3. Similarly, backup_stopped_vm() calls cleanup() on qemu-img convert failure but does not exit, allowing the loop to continue with subsequent disks despite the failure. This fix: - Adds VM state detection and resume to cleanup(), ensuring the VM is always resumed if found in a paused state during error handling - Adds missing 'exit 1' after cleanup() in the Failed backup job case to prevent the infinite monitoring loop - Adds missing 'exit 1' after cleanup() in backup_stopped_vm() on qemu-img convert failure Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * ci: retrigger workflow (flaky/stale shards) * nasbackup.sh: keep cleanup() best-effort if domstate fails With set -eo pipefail, a non-zero virsh domstate (libvirt unavailable or the domain gone) in the vm_state assignment would abort cleanup() before the rm/umount/rmdir. Append '|| true' so cleanup always runs to completion. Addresses the review suggestion (Copilot, endorsed by @abh1sar and @weizhouapache). Signed-off-by: James Peru <jmsperu@gmail.com> --------- Signed-off-by: James Peru <jmsperu@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: jmsperu <jmsperu@users.noreply.github.com>	2026-07-07 13:04:50 +02:00
Manoj Kumar	4d006b5f85	UI: Fix missing label.allocated key in Status widget test mock (#13546) ... PR #13254 added an 'allocated' case to Status.vue getText() that calls $t('label.allocated'), but did not update the test mock data, causing two Allocated badge tests to fail in CI.	2026-07-07 12:43:07 +02:00
Wei Zhou	b3b9caddc1	Merge remote-tracking branch 'apache/4.22'	2026-07-07 10:19:50 +02:00
Manoj Kumar	167eb0af75	CloudStack DNS framework - Integrate PowerDNS as first plugin (#12737)	2026-07-07 09:39:15 +02:00
Josh Gordon	a951ac61d0	UI: Don't set management server ID if cookie isn't set (#13404)	2026-07-06 21:13:13 +02:00
Jarek Potiuk	4beab943f2	Add draft project security threat-model document (#13293)	2026-07-06 14:51:05 +02:00
Suresh Kumar Anaparti	4262c026d0	KVM HA: Fix CheckOnHostAnswer success flag when there is no heartbeat (#13373)	2026-07-06 13:56:04 +02:00
Suresh Kumar Anaparti	9e8855a6f5	Add async job event bus publisher (#12971) ... * Async event bus publishing in AsyncJobManagerImpl to reduce API thread contention publishOnEventBus() was calling _messageBus.publish() synchronously on the request thread, which blocks on MessageBusBase$Gate (an exclusive mutex). JFR analysis showed this causing up to 107ms waits on Jetty request threads, contributing to 502 errors from the upstream load balancer. Move event bus publishing to a dedicated single-threaded executor so API request threads are no longer blocked by Gate contention. Event ordering is preserved by the single-threaded executor. * Wrap async event bus publish in ManagedContextRunnable for DB connection safety The sole subscriber (ApiServer.handleAsyncJobPublishEvent) performs DAO reads (getUserIncludingRemoved, getAccount, findById) inside its callback. Without ManagedContextRunnable, the EventBus thread would not have proper TransactionLegacy lifecycle management, risking DB connection leaks. * logger fix * review comments * review changes --------- Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-07-06 07:54:34 -03:00
dahn	7c2a8768e6	check state instead of power state on change offering for ROOT volume (#13271) ... * check state instead of power state on change offering for ROOT volume * tests * Apply suggestions from code review Co-authored-by: Fabricio Duarte <fabricio.duarte.jr@gmail.com> Co-authored-by: dahn <daan.hoogland@gmail.com> * Apply test by package private * fixing tests --------- Co-authored-by: Daan Hoogland <dahn@apache.org> Co-authored-by: Fabricio Duarte <fabricio.duarte.jr@gmail.com>	2026-07-06 14:41:25 +05:30
Pearl Dsilva	e63b7da74c	Update nw_rate & mc_rate to int unsigned to allow rates > 65Gbps (#13380) ... * update column type * Apply suggestion from @DaanHoogland Co-authored-by: dahn <daan@onecht.net> --------- Co-authored-by: Daan Hoogland <daan@onecht.net> Co-authored-by: Pearl Dsilva <pearl1954@gmail.com> Co-authored-by: Wei Zhou <weizhou@apache.org> Co-authored-by: Harikrishna <harikrishna.patnala@gmail.com>	2026-07-06 13:12:14 +05:30
Rajiv Jain	3327e1449c	CloudStack Volume support with ONTAP storage (#13053) ... Co-authored-by: Jain, Rajiv <Rajiv.Jain@netapp.com> Co-authored-by: Surya Gupta <suryag@netapp.com> Co-authored-by: Gupta, Surya <Surya.Gupta@netapp.com> Co-authored-by: Locharla, Sandeep <Sandeep.Locharla@netapp.com> Co-authored-by: Srivastava, Piyush <Piyush.Srivastava@netapp.com>	2026-07-06 08:49:28 +02:00
Abhisar Sinha	daa2e61eef	Fix encryption and migration not working on Shared mountpoint (#13537)	2026-07-06 08:08:04 +02:00
GaOrtiga	b7d4df0a11	Add more details to VM deployment failure alert messages (#12939) ... Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Erik Böck <89930804+erikbocks@users.noreply.github.com>	2026-07-04 16:26:08 +02:00
Gean Jair Silva	2032bbd7f6	Addition of the status filter in the backup listing API (#13254) ... Co-authored-by: gean.silva <gean.silva@scclouds.com.br> Co-authored-by: Gean Jair Silva <89494158+GeanJS@users.noreply.github.com> Co-authored-by: Bernardo De Marco Gonçalves <bernardomg2004@gmail.com>	2026-07-03 16:58:39 +02:00
Nicolas Vazquez	135922fa63	listHosts: add 'core' details (#13444) ... * listHosts: add 'core' details * Include msid response and integrate core details into the base response method Co-authored-by: abennatan <a_bennatan@apple.com>	2026-07-03 17:48:10 +05:30
Aurélien Pupier	7e84850a03	Restrict trigger push branch for GitHub Workflow (#13522) ... Signed-off-by: Aurélien Pupier <apupier@ibm.com>	2026-07-02 20:50:38 +02:00
Henrique Sato	6f30b0d583	Custom login base domain using GUI whitelabel themes (#13412)	2026-07-02 20:19:31 +02:00
Bernardo De Marco Gonçalves	5c4bc486d2	Enable dynamic scaling of Kubernetes cluster offerings for KVM (#13226)	2026-07-01 17:26:57 -03:00
dahn	36fedce988	test: cleanup resources in test_deploy_vm_iso, use base class tearDown (#13136) ... * test: cleanup resources in test_deploy_vm_iso and code * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: dahn <daan.hoogland@gmail.com> * style and syntaxt --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Daan Hoogland <dahn@apache.org>	2026-07-01 20:30:54 +02:00
Wei Zhou	348ceaff33	kvm: get ip address of Windows vms via virsh domifaddr (#12651)	2026-07-01 20:29:54 +02:00
Wido den Hollander	a97c510374	kvm: Add a configuration setting to switch between multicast and evpn VXLAN modes (#13107) ... * kvm: Add a configuration setting to switch between multicast and evpn VXLAN modes Using the 'network.vxlan.mode' setting you can switch between the multicast (default) and evpn VXLAN modes on a KVM Agent. When nothing is configured CloudStack will default to multicast by using the modifyvxlan.sh script in the background. If this setting is set to 'evpn' the KVM Agent will execute the 'modifyvxlan-evpn.sh' script which will configure the VXLAN devices for EVPN (usually with FRRouting with BGP) mode. This removes the need to manually replace a shell script on the hypervisor to switch modes. Existing environments are not touched by this and it is safe to add this setting a an environment already using EVPN for the VXLAN deployment. * Add network.vxlan.mode to agent.properties Make sure there is an example in the agent.properties file so people can easily discover this configuration setting exists	2026-07-01 10:49:18 +02:00
Pearl Dsilva	006831daaf	UI: Prevent failure when loading network offerings when physical network has a tag (#13503) ... Co-authored-by: Pearl Dsilva <pearl1954@gmail.com>	2026-07-01 10:25:09 +02:00
Jtolelo	097a57967b	systemvm: emit IPv6 prefix block for redundant VPC VRs in radvd.conf (#13127)	2026-06-30 09:06:53 +02:00
Vishesh	d2c8aa7dff	Feature: Key Management Service (KMS) (#12711) ... * Add KMS framework * integrate volume encryption with kms * rotate keys wrapped with older versions * allow adding kms key in deploy vm * temp commit * Add some tests * fixups and some ui changes * Change wrapping algo for pkcs * fixups * fix list apis * directly create the key in the store * Add missing license * fixup * Fix missing labels and label generation * Fixup ui bug * fixups * Add smoke test * Fix test failures * fixups * Address comments * fix failing tests * Address comments * Fix pre-commit error * fixup * Fix failing unit tests * fixup * fix UI bug * fixup createHSM in marvin library * Fix bugs * fix failing test * fixup * fixup * fix marvin lib & tests * fix marvin tests * fixup * Make HSM Profile domain scoped * fixup	2026-06-30 10:10:41 +05:30
Robin Karlberg	1853435185	Fix RESTRICTED_TOKENS typo issue (#12709)	2026-06-29 18:22:49 -03:00
Bernardo De Marco Gonçalves	236e01aad8	Soft delete port forwarding, load balancing and firewall rules (#13015)	2026-06-29 18:21:19 -03:00
Rene Peinthor	0231e67b9d	Linstor: Add controller token auth support (#13470) ... * linstor: update java-linstor to 0.7.0 to support auth token api With Linstor 1.34.0 a new authentication mode is supported: * Bearer token To support that it had to be implemented in the java-linstor library and we need to store the auth token per storage pool. Also per default with this auth mode Linstor will run with HTTPS enabled, so we also have to support that. * ui: seed default-on toggles in zone wizard while hidden StaticInputsForm.fillValue() only seeded defaults for currently-displayed fields, so a display-gated switch with checked:true bound to an undefined value and rendered as off once revealed. Seed checked switch/checkbox fields even while hidden, so the Linstor 'Allow self-signed certificate' toggle defaults on in the zone creation wizard.	2026-06-29 20:15:56 +02:00
Wei Zhou	2ba02c1a4a	systemvm: fix VPC VPN issue when network id is bigger than 1000 on Netris (#13346)	2026-06-29 16:52:14 +02:00
Vishesh	4625a43672	Batch NIC and VLAN reads in collectVmNetworkStatistics to reduce per-NIC DB round-trips (#13474) ... Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-06-29 15:45:56 +02:00
Daan Hoogland	fb5e24fa08	Merge branch '4.22'	2026-06-29 15:42:25 +02:00
Daan Hoogland	d5101b0c90	Merge branch '4.20' into 4.22	2026-06-29 15:33:26 +02:00
Daman Arora	5ed4894e97	storage: Add config keys for controlling public/private template secondary storage replica counts (#12877) ... Adds two new operator-level configuration keys to control the number of secondary storage copies made for public and private templates, decoupling replica count from template visibility. - secstorage.public.template.copy.max (default: 0 = all stores, preserving existing behavior) - secstorage.private.template.copy.max (default: 1, preserving existing behavior)	2026-06-29 08:14:27 +02:00
Wei Zhou	06aebb63ee	Update .asf.yaml: remove protected_branches	2026-06-26 08:38:48 +02:00
Suresh Kumar Anaparti	f49ab6b394	API rule regex optimization (#13109) ... Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-06-25 17:18:05 +02:00