Skip to content

feat(e2e-ui): local workbench identity and cluster gitops - #177

Open
patrickleet wants to merge 6 commits into
feat/blob-simulate-move-wasmfrom
feat/e2e-ui-local-workbench-identity
Open

feat(e2e-ui): local workbench identity and cluster gitops#177
patrickleet wants to merge 6 commits into
feat/blob-simulate-move-wasmfrom
feat/e2e-ui-local-workbench-identity

Conversation

@patrickleet

@patrickleet patrickleet commented Aug 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Local workbench charts/env Applications for e2e-ui (cluster-dev + source delivery hooks)
  • Cluster gitops layout: configurations/, stacks/, provider DRCs, vault ExternalSecrets wiring
  • Zitadel identity scope: cluster Project + roles + demo humans (alice/bob/admin); worktree OIDC app only (redirects + Login V2 baseUri)
  • OIDC audience residual for OidcBearer; delivery defaults to git worktree root

Stacked on feat/blob-simulate-move-wasm (top of the GraphQL QS epic stack). Base is that branch, not the epic tip.

Test plan

  • hops local gitops cluster applies configurations/stacks without drift against this tree
  • UI chart with identity.enabled renders shared Project/roles/humans + worktree OIDC app
  • Dogfood login: alice / Password1! against local AuthStack + host FQDNs
  • CI e2e-ui offline gates still green on the stack

@coderabbitai

coderabbitai Bot commented Aug 9, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: ff2248fc-8a4b-47d2-8c7d-ef5669666acc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Add Helm deploy charts for api/ui with cluster-dev vs package
posture, local PSQLCluster for the API, and hops.local
Application YAMLs under gitops/env/local. Document hops local
up as Option A for dogfood.

Implements [[tasks/lwb-e2e-ui-gitops-charts]] [[tasks/lwb-docs-happy-path]]
When sourceDelivery.mode=sync, wait for .hops-synced / package manifest
before cargo/vite so tar/mutagen can populate emptyDir first.
api deliveryPath points at e2e-ui Cargo root; ui at ui/ with vite.
cluster-dev waits indefinitely for .hops-synced/package/Cargo before start.
…ault

Add gitops/cluster tree (packages, providers, AuthStack, PSQLStack,
e2e-identity MRs) and SecretStack vault backend claim for local workbench.
Wire app charts/env Applications for cluster-dev delivery. Keep secrets out
of YAML; document kubectl bootstrap in SECRETS.md.
Move shared Zitadel Project/roles/humans to cluster scope, keep OIDC
apps worktree-scoped for redirects and Login V2 baseUri. Restructure
cluster gitops (configurations/, stacks/, DRCs) and ExternalSecrets
hooks for OIDC + demo passwords.
Wire project id into local Application env so the API does not fall
back to DevHeaders, and drop hand-rolled deliveryPath so delivery uses
the git worktree root by default.
@patrickleet
patrickleet force-pushed the feat/e2e-ui-local-workbench-identity branch from 3c3fe6b to 297bf92 Compare August 9, 2026 06:36
@patrickleet
patrickleet changed the base branch from tasks--graphql-qs-epic to feat/blob-simulate-move-wasm August 9, 2026 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant