feat/declarative-application-deployment #345

Merged
johnride merged 34 commits from feat/declarative-application-deployment into master 2026-08-07 13:11:46 +00:00

34 Commits

Author SHA1 Message Date
0c6cc91fcf chore: Add notice about architecture review in code review skill
All checks were successful
Run Check Script / check (pull_request) Successful in 1m57s
2026-08-03 16:52:56 -04:00
7d75358f48 fix: PG debug expose via NodePort Service for PG16 clients 2026-08-01 14:48:08 -04:00
b96849036c feat: grant tenant deployers OpenShift routes RBAC 2026-08-01 13:16:15 -04:00
63aae5d02a fix: DB debug route uses router-assigned host, no cluster config 2026-08-01 13:10:55 -04:00
66fea4ff6d feat: ManagedPostgres debug_route with weight-toggle OKD Route 2026-08-01 12:56:24 -04:00
00b1c8ed85 fix: SigV4 CORS query must be cors= for Ceph RGW 2026-08-01 12:27:33 -04:00
3d435a854e refactor: put bucket CORS with SigV4 HTTP instead of aws-sdk-s3 2026-08-01 12:13:34 -04:00
b6f4382ea4 fix: startup probe grace so slow boots do not crash-loop 2026-08-01 12:04:51 -04:00
e932252a77 chore: lock aws-sdk-s3 for object bucket CORS 2026-08-01 11:56:45 -04:00
54f7d6187b feat: public object storage endpoint override and bucket CORS 2026-08-01 11:56:31 -04:00
8c74fa66ce fix: use place-neutral default OBC region 2026-08-01 08:54:23 -04:00
7881197aed feat: Add objectbuckets permissions to harmony app tenant 2026-08-01 08:52:14 -04:00
61260612cb fix: default empty OBC region to us-east-1 2026-08-01 08:51:29 -04:00
c3c04fd6f9 feat: grant tenants ObjectBucketClaim RBAC 2026-08-01 08:39:22 -04:00
40c3f92bc6 feat: ManagedBucket via ObjectBucketClaim credentials 2026-08-01 08:01:37 -04:00
4dc86f84d9 fix: poll deployment readiness instead of fragile watches 2026-08-01 01:36:50 -04:00
dde3be22c7 feat: pin ManagedPostgres version onto CNPG image 2026-08-01 01:04:09 -04:00
a8b47ccdd2 fix: treat Zitadel grant no-op as success
COMMAND-Rs8fy ("User grant has not been changed") is the grant-path
equivalent of COMMAND-1m88i; both are idempotent re-applies.
2026-08-01 00:41:06 -04:00
294b7a73a9 fix: store Zitadel bootstrap secrets in harmony-state
Deployer-writable path; generate missing bootstrap passwords on first
human create. Note tenant NetworkPolicy ingress TODO for cert-manager.
2026-08-01 00:23:06 -04:00
9f2edff2a6 fix: skip Helm values schema network fetch
Zitadel's chart schema $refs raw.githubusercontent.com; okd-cb1 cannot
reach it. Scores own values correctness.
2026-07-31 23:44:52 -04:00
95edba0364 fix: pull Zitadel chart from Harbor
okd-cb1 cannot reach GitHub chart CDNs; use the public Harbor OCI mirror.
2026-07-31 23:14:35 -04:00
0a787fc257 fix: use official Zitadel OCI chart 2026-07-31 21:02:26 -04:00
85ec08e9e3 fix: fetch pinned Zitadel chart directly 2026-07-31 20:13:25 -04:00
7e2398d095 feat: reconcile registry pull credentials 2026-07-31 19:30:51 -04:00
1c1cf1f96b fix: isolate generated deployment state 2026-07-31 19:30:41 -04:00
dcd5200e95 feat: provision tenant registry credentials 2026-07-31 16:26:56 -04:00
79780ce406 feat: add context-based tenant administration 2026-07-31 16:01:32 -04:00
72edf6dd83 feat: provision verified tenant cluster access 2026-07-31 16:01:12 -04:00
0d157bd4da feat: reconcile tenant authorization 2026-07-31 16:00:56 -04:00
9c13d062de refactor: centralize Zitadel and OpenBao management 2026-07-31 16:00:38 -04:00
4df57af927 Revert "feat: add reusable application tenant CLI"
This reverts commit 47042651e9.
2026-07-31 07:22:37 -04:00
47042651e9 feat: add reusable application tenant CLI 2026-07-29 21:53:22 -04:00
66eba5f0f3 feat: provision application tenant credentials 2026-07-29 21:34:09 -04:00
47e786c3a8 feat: add declarative application deployment 2026-07-29 19:20:00 -04:00