Lightweight, cluster-config-aware app monitoring: attach to a cluster stack vs.
provision a tenant-local one, so tenants don't each duplicate cluster-level
Prometheus data while staying self-contained. Audits the four overlapping
backends (none deprecated yet — pending the model decision).
Extend the zitadel module and harmony_app so an app deploy crate can stand up
and fully provision a live Zitadel, and deploy a compose app, on autoprovisioned
k3d or a remote tenant.
- ZitadelSetupScore: human users, org/instance memberships (ORG_OWNER,
IAM_LOGIN_CLIENT), machine client-secret minting, and a self-established
port-forward so the management API is reachable on k3d (no ingress).
- ZitadelCredentialsExportScore: publish provisioned project id / client ids /
client secret / machine key into a ConfigMap + Secret for apps to reference.
- harmony_app: AppContext autoprovision mode + K8sAnywhereConfig::local_k3d();
import_to_k3d ensures the cluster exists (fixes ship ordering); SecretFileMount
chart support to mount a secret as a file.
