Niklas Ye
e1103f2b7d
Credentials: the TerdutServer controller generates <name>-operator-key in the server's own namespace (owned by it) and hands it to the pods as TERDUT_OPERATOR_KEY; the server creates its instance-scoped account from it at every start. A replaced Secret rolls the pods. The bootstrap handshake, the checkpoint Secret, per-team service accounts and credentials Secrets, BootstrapStateLost and credentials.deletionPolicy are gone. CRDs: TerdutServer, TerdutTeam and TerdutAlertSource. TerdutEscalationRule and TerdutDeadmanSwitch become spec.escalation and spec.deadmanSwitches[] on the team (matched by name, extras removed); team invites are removed. A team is created under the identity <namespace>/<name> (external_id), so a retry, a lost status or a deleted team heal by repeating the same call, and a display name owned by another team is TeamNameTaken instead of an adoption. The server resolves escalation usernames (UnknownUser condition). OIDC claim names and trustEmail are spec fields. Fixes: query values are URL-escaped; every delete treats 404 as success; deleting a team no longer depends on allowedTeams consent; a switch or integration deleted on the server is recreated; unnamed switches take the CR's name. Cleanup: scaffold e2e test, AGENTS.md, devcontainer, unused config/ pieces and Client.Version() removed; DESIGN.md, README, ROADMAP and the demo (run-demo.sh, manifests) rewritten for the new design. Secret RBAC stays cluster-wide, now stated in DESIGN.md section 9. Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN
44 lines
1.1 KiB
Plaintext
44 lines
1.1 KiB
Plaintext
# Code generated by tool. DO NOT EDIT.
|
|
# This file is used to track the info used to scaffold your project
|
|
# and allow the plugins properly work.
|
|
# More info: https://book.kubebuilder.io/reference/project-config.html
|
|
cliVersion: 4.16.0
|
|
domain: ryuvia.com
|
|
layout:
|
|
- go.kubebuilder.io/v4
|
|
plugins:
|
|
helm.kubebuilder.io/v2-alpha:
|
|
manifests: dist/install.yaml
|
|
output: charts
|
|
projectName: terdut-operator
|
|
repo: git.ryuvia.com/niklas/terdut-operator
|
|
resources:
|
|
- api:
|
|
crdVersion: v1
|
|
namespaced: true
|
|
controller: true
|
|
domain: ryuvia.com
|
|
group: terdut
|
|
kind: TerdutServer
|
|
path: git.ryuvia.com/niklas/terdut-operator/api/v1alpha1
|
|
version: v1alpha1
|
|
- api:
|
|
crdVersion: v1
|
|
namespaced: true
|
|
controller: true
|
|
domain: ryuvia.com
|
|
group: terdut
|
|
kind: TerdutTeam
|
|
path: git.ryuvia.com/niklas/terdut-operator/api/v1alpha1
|
|
version: v1alpha1
|
|
- api:
|
|
crdVersion: v1
|
|
namespaced: true
|
|
controller: true
|
|
domain: ryuvia.com
|
|
group: terdut
|
|
kind: TerdutAlertSource
|
|
path: git.ryuvia.com/niklas/terdut-operator/api/v1alpha1
|
|
version: v1alpha1
|
|
version: "3"
|