Skip to content

feat(operator): declarative-management marker (server + console)#19

Merged
fcraviolatti merged 1 commit into
mainfrom
feat/operator-managed-marker
Jul 20, 2026
Merged

feat(operator): declarative-management marker (server + console)#19
fcraviolatti merged 1 commit into
mainfrom
feat/operator-managed-marker

Conversation

@fcraviolatti

Copy link
Copy Markdown
Contributor

Re-targeted to main after #16 merged (original PR #17 auto-closed when its base branch was deleted). Server + console support for the operator declarative-management marker.

Migration 000179 adds nullable managed_by/managed_ref to the 8 tables the
Kubernetes operator reconciles (oidc_clients, roles, groups, org_auth_policies,
webhooks, identity_providers, org_password_policy, org_rate_limits). A shared
ApplyManagedMarker + header parser (X-Clavex-Managed-By / -Ref / -Release) let
create/update handlers stamp the marker only when the operator sends the header;
an ordinary UI/API update never disturbs an existing marker. GET/List expose the
fields. Disown is explicit via X-Clavex-Managed-Release and dedicated
DELETE .../managed-marker endpoints for the org password-policy / rate-limit
sections (clear the marker, keep the values).

Console: shared ManagedBadge (warn-only, fields stay editable) on the clients,
roles, groups, webhooks, identity-provider and auth-policy views, and per-section
on the org password-policy and rate-limit settings.
@fcraviolatti
fcraviolatti merged commit 6284c79 into main Jul 20, 2026
13 of 15 checks passed
@fcraviolatti
fcraviolatti deleted the feat/operator-managed-marker branch July 20, 2026 07:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant