You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
Non-Admin Workspace Concurrency Limits (MAX_WORKSPACES_PER_USER): Introduced --max-workspaces-per-user CLI option and MAX_WORKSPACES_PER_USER environment variable setting (defaults to 0 for unlimited). Limits the maximum number of concurrent active workspaces a non-admin user can own. Administrators bypass quota limits. See ADR-026.
Template Role & Scope Authorization Annotations (nogoo9/allowed-roles & nogoo9/allowed-scopes): Added template annotations to restrict workspace creation from specific pod templates to users possessing required OIDC roles or scopes. Evaluates using strict AND logic. Administrators bypass template annotations. See ADR-027.
Template Discovery Metadata: Extended list_templates and get_template tool outputs to expose allowedRoles and allowedScopes metadata arrays for UI clients.
E2E Test Suite for Limits and Templates: Added scripts/test-e2e-workspace-limits-and-templates.ts to test quota limits, admin quota bypass, template authorization annotations, and resource cleanup.