From b263b48510b466c729c4173001c96a019579ec69 Mon Sep 17 00:00:00 2001 From: Niklas Ye Date: Thu, 1 Oct 2026 10:15:52 +0200 Subject: [PATCH] ROADMAP.md: mark Stage 1's kind e2e pass done, with what it found --- ROADMAP.md | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-) diff --git a/ROADMAP.md b/ROADMAP.md index 6f9a607..9a1c45d 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -89,12 +89,19 @@ New commits build forward over the old ones; no git history rewrite. `/api/bootstrap` and `/api/service-accounts` (§11), including the adopt-on-409 recovery path and the one fail-closed case (`BootstrapStateLost`), not just the happy path. -- A real `kind` end-to-end pass is still open (bring-your-own DSN is - simplest there) to prove a `TerdutServer` CR actually produces a running, - bootstrapped terdut-server pod against a real cluster, not just envtest's - fake API server. The Zalando path can additionally be validated for real - against the org's own cluster later, where `postgres-operator` already - runs, rather than only in a disposable `kind` stand-in. +- **Done, 2026-10-01**: a real `kind` end-to-end pass (bring-your-own DSN, + real terdut-server `v0.33.0` image, operator built into a real image and + deployed as a real Pod, not `go run` against the cluster). `TerdutServer` + went `Ready`; the generated credential authenticated and exercised its + real capability against the actual server + (`GET`/`POST /api/teams` → `200`/`201`, confirmed from terdut-server's own + access log). Caught two real bugs no `envtest` suite could have (its + client bypasses RBAC): `.dockerignore`'s `!**/*.go` not working under + podman, and missing RBAC for `events.k8s.io` (the new events API + `GetEventRecorder` uses) — both fixed. The Zalando path can additionally + be validated for real against the org's own cluster later, where + `postgres-operator` already runs, rather than only in a disposable `kind` + stand-in — not done in this pass. ## Stage 2 — `TerdutTeam`