Add platform workspace bootstrap to controllers CD tree #57

Merged

daniil.gorshkov merged 1 commit from feat/platform-workspace-bootstrap into feat/system-team-cd 2026-08-10 13:40:01 +00:00

Conversation 2 Commits 1 Files changed 1 +1

kiryl.stankevich commented 2026-08-06 12:16:10 +00:00

Member

Copy link

Bootstraps root:controllers:platform with human Zitadel-OIDC admin login,
following the per-domain declarative pattern (manifest-apply-job, sync-waves):

• platform-auth: WorkspaceAuthenticationConfiguration (Zitadel JWT, per-role
  CEL mapping platform-admin -> oidc:platform-admin) + WorkspaceType, applied
  into root:controllers (wave 0)
• init-workspace: Workspace of type platform (wave 1)
• provision-workspace: platform-admin RBAC + self-review into the workspace,
  via a system:masters kubeconfig scoped to root:controllers:platform (wave 2)

Bootstraps root:controllers:platform with human Zitadel-OIDC admin login, following the per-domain declarative pattern (manifest-apply-job, sync-waves): - platform-auth: WorkspaceAuthenticationConfiguration (Zitadel JWT, per-role CEL mapping platform-admin -> oidc:platform-admin) + WorkspaceType, applied into root:controllers (wave 0) - init-workspace: Workspace of type platform (wave 1) - provision-workspace: platform-admin RBAC + self-review into the workspace, via a system:masters kubeconfig scoped to root:controllers:platform (wave 2)

kiryl.stankevich added 1 commit 2026-08-06 12:16:10 +00:00

Add platform workspace bootstrap to controllers CD tree ... b12c3ee0fd

Bootstraps root:controllers:platform with human Zitadel-OIDC admin login,
following the per-domain declarative pattern (manifest-apply-job, sync-waves):

- platform-auth: WorkspaceAuthenticationConfiguration (Zitadel JWT, per-role
  CEL mapping platform-admin -> oidc:platform-admin) + WorkspaceType, applied
  into root:controllers (wave 0)
- init-workspace: Workspace of type platform (wave 1)
- provision-workspace: platform-admin RBAC + self-review into the workspace,
  via a system:masters kubeconfig scoped to root:controllers:platform (wave 2)

Registered in controllers/kustomization.yaml so ArgoCD auto-syncs it.

kiryl.stankevich requested reviews from alex.malashevich, daniil.gorshkov, bela.toth 2026-08-07 07:56:25 +00:00

bela.toth approved these changes 2026-08-07 08:42:39 +00:00

alex.malashevich reviewed 2026-08-07 11:53:48 +00:00

alex.malashevich left a comment

Copy link

LGTM so far 👍

LGTM so far 👍

daniil.gorshkov referenced this pull request from a commit 2026-08-10 13:37:44 +00:00

Merge pull request 'Add platform workspace bootstrap to controllers CD tree' (#57) from feat/platform-workspace-bootstrap into feat/system-team-cd

daniil.gorshkov added 1 commit 2026-08-10 13:39:43 +00:00

fix: resolve merge conflicts 504cfb9fab

daniil.gorshkov merged commit 655ed92192 into feat/system-team-cd 2026-08-10 13:40:01 +00:00

daniil.gorshkov referenced this pull request from a commit 2026-08-10 13:40:02 +00:00

Merge pull request 'Add platform workspace bootstrap to controllers CD tree' (#57) from feat/platform-workspace-bootstrap into feat/system-team-cd

Sign in to join this conversation.

Reviewers

No reviewers

daniil.gorshkov

bela.toth

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

4 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

DevFW-CICD/poc-core-deploy!57

No description provided.