feat(operator): declarative-management marker (server + console) - #17
Closed
fcraviolatti wants to merge 1 commit into
Closed
feat(operator): declarative-management marker (server + console)#17fcraviolatti wants to merge 1 commit into
fcraviolatti wants to merge 1 commit into
Conversation
Migration 000179 adds nullable managed_by/managed_ref to the 8 tables the Kubernetes operator reconciles (oidc_clients, roles, groups, org_auth_policies, webhooks, identity_providers, org_password_policy, org_rate_limits). A shared ApplyManagedMarker + header parser (X-Clavex-Managed-By / -Ref / -Release) let create/update handlers stamp the marker only when the operator sends the header; an ordinary UI/API update never disturbs an existing marker. GET/List expose the fields. Disown is explicit via X-Clavex-Managed-Release and dedicated DELETE .../managed-marker endpoints for the org password-policy / rate-limit sections (clear the marker, keep the values). Console: shared ManagedBadge (warn-only, fields stay editable) on the clients, roles, groups, webhooks, identity-provider and auth-policy views, and per-section on the org password-policy and rate-limit settings.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Records which resources are owned by the Kubernetes operator so the console and API can warn that out-of-band edits will be reverted at the next reconcile.
Stacked on
feat/operator-event-stream-audit(the marker code sits next to the audit/event-stream hooks in the same handlers, so it can't cleanly rebase ontomainuntil that lands). Re-target tomainonce the base merges.Server
managed_by/managed_refon the 8 operator-reconciled tables (oidc_clients,roles,groups,org_auth_policies,webhooks,identity_providers,org_password_policy,org_rate_limits).ApplyManagedMarker+ header parser (X-Clavex-Managed-By/-Ref/-Release). Create/update handlers stamp the marker only when the operator sends the header; an ordinary UI/API update never disturbs an existing marker.GET/Listexpose both fields.X-Clavex-Managed-Releaseheader, plus dedicatedDELETE .../password-policy/managed-markerand.../rate-limits/managed-markerendpoints that clear the marker while preserving the live settings.Console
ManagedBadge(warn-only — fields stay editable) on clients, roles, groups, webhooks, identity providers and auth policies, and per-section on the org password-policy and rate-limit settings.Pairs with clavex-sdk-go v0.3.0 and the clavex-operator marker PR.