feat(zitadel): full-fidelity provisioning + app deploy ergonomics #338

johnride · 2026-06-23T02:04:24Z

johnride commented

2026-06-23 02:04:24 +00:00

Extend the zitadel module and harmony_app so an app deploy crate can stand up
and fully provision a live Zitadel, and deploy a compose app, on autoprovisioned
k3d or a remote tenant.

ZitadelSetupScore: human users, org/instance memberships (ORG_OWNER,
IAM_LOGIN_CLIENT), machine client-secret minting, and a self-established
port-forward so the management API is reachable on k3d (no ingress).
ZitadelCredentialsExportScore: publish provisioned project id / client ids /
client secret / machine key into a ConfigMap + Secret for apps to reference.
harmony_app: AppContext autoprovision mode + K8sAnywhereConfig::local_k3d();
import_to_k3d ensures the cluster exists (fixes ship ordering); SecretFileMount
chart support to mount a secret as a file.

Extend the zitadel module and harmony_app so an app deploy crate can stand up and fully provision a live Zitadel, and deploy a compose app, on autoprovisioned k3d or a remote tenant. - ZitadelSetupScore: human users, org/instance memberships (ORG_OWNER, IAM_LOGIN_CLIENT), machine client-secret minting, and a self-established port-forward so the management API is reachable on k3d (no ingress). - ZitadelCredentialsExportScore: publish provisioned project id / client ids / client secret / machine key into a ConfigMap + Secret for apps to reference. - harmony_app: AppContext autoprovision mode + K8sAnywhereConfig::local_k3d(); import_to_k3d ensures the cluster exists (fixes ship ordering); SecretFileMount chart support to mount a secret as a file.

johnride added 1 commit 2026-06-23 02:04:25 +00:00

feat(zitadel): full-fidelity provisioning + app deploy ergonomics

Run Check Script / check (pull_request) Successful in 2m32s

Details

8de61859b4

Extend the zitadel module and harmony_app so an app deploy crate can stand up
and fully provision a live Zitadel, and deploy a compose app, on autoprovisioned
k3d or a remote tenant.

- ZitadelSetupScore: human users, org/instance memberships (ORG_OWNER,
  IAM_LOGIN_CLIENT), machine client-secret minting, and a self-established
  port-forward so the management API is reachable on k3d (no ingress).
- ZitadelCredentialsExportScore: publish provisioned project id / client ids /
  client secret / machine key into a ConfigMap + Secret for apps to reference.
- harmony_app: AppContext autoprovision mode + K8sAnywhereConfig::local_k3d();
  import_to_k3d ensures the cluster exists (fixes ship ordering); SecretFileMount
  chart support to mount a secret as a file.

johnride added 1 commit 2026-06-23 02:18:36 +00:00

docs(roadmap): defer tenant application monitoring; capture design tension

Run Check Script / check (pull_request) Successful in 2m26s

Details

894207bf71

Lightweight, cluster-config-aware app monitoring: attach to a cluster stack vs.
provision a tenant-local one, so tenants don't each duplicate cluster-level
Prometheus data while staying self-contained. Audits the four overlapping
backends (none deprecated yet — pending the model decision).

johnride force-pushed feat/zitadel-full-provisioning from 894207bf71 to 1e895d7c83

2026-06-23 02:25:26 +00:00

Compare

johnride merged commit c33602e00e into master

2026-06-23 02:25:46 +00:00

johnride deleted branch feat/zitadel-full-provisioning

2026-06-23 02:25:47 +00:00

johnride referenced this issue from a commit

2026-06-23 02:25:47 +00:00

Merge pull request 'feat(zitadel): full-fidelity provisioning + app deploy ergonomics' (#338) from feat/zitadel-full-provisioning into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: NationTech/harmony#338