feat(e2e-ui): local workbench identity and cluster gitops - #177
patrickleet wants to merge 7 commits into
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
3c3fe6b to
297bf92
Compare
Add Helm deploy charts for api/ui with cluster-dev vs package posture, local PSQLCluster for the API, and hops.local Application YAMLs under gitops/env/local. Document hops local up as Option A for dogfood. Implements [[tasks/lwb-e2e-ui-gitops-charts]] [[tasks/lwb-docs-happy-path]]
When sourceDelivery.mode=sync, wait for .hops-synced / package manifest before cargo/vite so tar/mutagen can populate emptyDir first.
api deliveryPath points at e2e-ui Cargo root; ui at ui/ with vite. cluster-dev waits indefinitely for .hops-synced/package/Cargo before start.
…ault Add gitops/cluster tree (packages, providers, AuthStack, PSQLStack, e2e-identity MRs) and SecretStack vault backend claim for local workbench. Wire app charts/env Applications for cluster-dev delivery. Keep secrets out of YAML; document kubectl bootstrap in SECRETS.md.
Move shared Zitadel Project/roles/humans to cluster scope, keep OIDC apps worktree-scoped for redirects and Login V2 baseUri. Restructure cluster gitops (configurations/, stacks/, DRCs) and ExternalSecrets hooks for OIDC + demo passwords.
Wire project id into local Application env so the API does not fall back to DevHeaders, and drop hand-rolled deliveryPath so delivery uses the git worktree root by default.
Manage Zitadel instance loginV2 via Features MR so authorize redirects to this worktree's custom /login. Derive baseUri and OIDC placement from hops --name / helm release namespace; drop hand-set residual docs.
3854b81 to
5b354be
Compare
7be8ed7 to
9e48f87
Compare
Squash the complete stacked change set through PR #178 after GitHub's stack merge operation landed only the bottom layer. Includes PRs #172, #173, #174, #177, and #178. BREAKING CHANGE: the standalone CLI binary is named distributed instead of dctl, and application surface roles use the eligible/schema split.
|
Stack merge recovery: GitHub’s stack operation partially landed the stack. The complete stack through #178 is now preserved on main as aggregate squash b97f96a, whose tree matches the original #178 head exactly. This PR is superseded by that commit; its source branch is being retained. The prior broken main is preserved at recovery/github-stack-broken-main-20260813-031051. |
Summary
configurations/,stacks/, provider DRCs, vault ExternalSecrets wiringalice/bob/admin); worktree OIDC app only (redirects + Login V2 baseUri)Stacked on
feat/blob-simulate-move-wasm(top of the GraphQL QS epic stack). Base is that branch, not the epic tip.Test plan
hops local gitops clusterapplies configurations/stacks without drift against this treeidentity.enabledrenders shared Project/roles/humans + worktree OIDC appalice/Password1!against local AuthStack + host FQDNs