NationTech/harmony
3
0
Fork 2
Code Issues 38 Pull Requests 8 Actions Packages Projects Releases 1 Wiki Activity

feat/declarative-application-deployment #345

Merged
johnride merged 34 commits from feat/declarative-application-deployment into master 2026-08-07 13:11:46 +00:00
Conversation 0 Commits 34 Files Changed 50 +11482 -1960
johnride commented 2026-08-06 21:44:57 +00:00
Owner
Copy Link
No description provided.
johnride added 34 commits 2026-08-06 21:44:57 +00:00
feat: add declarative application deployment 47e786c3a8
feat: provision application tenant credentials 66eba5f0f3
feat: add reusable application tenant CLI 47042651e9
Revert "feat: add reusable application tenant CLI" 4df57af927 
This reverts commit 47042651e9.
refactor: centralize Zitadel and OpenBao management 9c13d062de
feat: reconcile tenant authorization 0d157bd4da
feat: provision verified tenant cluster access 72edf6dd83
feat: add context-based tenant administration 79780ce406
feat: provision tenant registry credentials dcd5200e95
fix: isolate generated deployment state 1c1cf1f96b
feat: reconcile registry pull credentials 7e2398d095
fix: fetch pinned Zitadel chart directly 85ec08e9e3
fix: use official Zitadel OCI chart 0a787fc257
fix: pull Zitadel chart from Harbor 95edba0364 
okd-cb1 cannot reach GitHub chart CDNs; use the public Harbor OCI mirror.
fix: skip Helm values schema network fetch 9f2edff2a6 
Zitadel's chart schema $refs raw.githubusercontent.com; okd-cb1 cannot
reach it. Scores own values correctness.
fix: store Zitadel bootstrap secrets in harmony-state 294b7a73a9 
Deployer-writable path; generate missing bootstrap passwords on first
human create. Note tenant NetworkPolicy ingress TODO for cert-manager.
fix: treat Zitadel grant no-op as success a8b47ccdd2 
COMMAND-Rs8fy ("User grant has not been changed") is the grant-path
equivalent of COMMAND-1m88i; both are idempotent re-applies.
feat: pin ManagedPostgres version onto CNPG image dde3be22c7
fix: poll deployment readiness instead of fragile watches 4dc86f84d9
feat: ManagedBucket via ObjectBucketClaim credentials 40c3f92bc6
feat: grant tenants ObjectBucketClaim RBAC c3c04fd6f9
fix: default empty OBC region to us-east-1 61260612cb
feat: Add objectbuckets permissions to harmony app tenant 7881197aed
fix: use place-neutral default OBC region 8c74fa66ce
feat: public object storage endpoint override and bucket CORS 54f7d6187b
chore: lock aws-sdk-s3 for object bucket CORS e932252a77
fix: startup probe grace so slow boots do not crash-loop b6f4382ea4
refactor: put bucket CORS with SigV4 HTTP instead of aws-sdk-s3 3d435a854e
fix: SigV4 CORS query must be cors= for Ceph RGW 00b1c8ed85
feat: ManagedPostgres debug_route with weight-toggle OKD Route 66fea4ff6d
fix: DB debug route uses router-assigned host, no cluster config 63aae5d02a
feat: grant tenant deployers OpenShift routes RBAC b96849036c
fix: PG debug expose via NodePort Service for PG16 clients 7d75358f48
chore: Add notice about architecture review in code review skill
All checks were successful
Run Check Script / check (pull_request) Successful in 1m57s
Details
0c6cc91fcf
johnride merged commit 62535c47d3 into master 2026-08-07 13:11:46 +00:00
johnride deleted branch feat/declarative-application-deployment 2026-08-07 13:11:46 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Architecture Decision Record
Good first issue
RFC
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
johnride jvtrudel reda stremblay
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NationTech/harmony#345
No description provided.
Delete Branch "feat/declarative-application-deployment"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?