Authorization pre-flight, AgentRun reclamation, GHES support, and a minikube e2e suite - #158

Merged

imaustink merged 21 commits into

mainfrom

e2e/system-tests

Jul 25, 2026

Commits on Jul 25, 2026

Add minikube e2e system tests

imaustink
and
claude
committed
Add minikube e2e values overlay and secret bootstrap

imaustink
and
claude
committed
Make the e2e environment actually exercise the identity gate

imaustink
and
claude
committed
Expose githubBaseUrl for GHES, and fix the e2e device-flow model

imaustink
and
claude
committed
ADR 0030: authorization pre-flight owned by the orchestrator, outside the LLM

imaustink
and
claude
committed
Implement ADR 0030 steps 4-5: batch pre-flight and sealed actor context

imaustink
and
claude
committed
ADR 0030: record that the orchestrator needs no App credentials after all

imaustink
and
claude
committed
e2e: skip happy-path with documented causes, harden fixtures

imaustink
and
claude
committed
e2e: reclaim AgentRuns after the suite, and retract the capacity excuse

imaustink
and
claude
committed
Reclaim terminal AgentRuns, and pin the credential/model boundary

imaustink
and
claude
committed
ADR 0030 §6: principals, and a signed sender assertion

imaustink
and
claude
committed
e2e: stop abandoned turns from starving later specs

imaustink
and
claude
committed
Stop Skaffold shipping an eight-day-old core-controller

imaustink
and
claude
committed
Roll fake-github when its script changes, instead of racing a restart

imaustink
and
claude
committed
Add stub-agent, and un-skip the happy-path e2e spec

imaustink
and
claude
committed
Extract AuthorizationService (ADR 0030 §1)

imaustink
and
claude
committed
CD: apply CRDs on every deploy, and validate the whole CR catalog

imaustink
and
claude
committed
Log one line per authorization verdict

imaustink
and
claude
committed
Make the parked-turn hold configurable, and stop it starving the e2e suite

imaustink
and
claude
committed
CD: preflight the cluster-scoped permission the CRD apply needs

imaustink
and
claude
committed
CD: correct the CRD provenance claim, now that the real cluster is readable

imaustink
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Authorization pre-flight, AgentRun reclamation, GHES support, and a minikube e2e suite - #158

Authorization pre-flight, AgentRun reclamation, GHES support, and a minikube e2e suite#158
imaustink merged 21 commits into
mainfrom
e2e/system-tests

Commits on Jul 25, 2026

Add minikube e2e system tests

Add minikube e2e values overlay and secret bootstrap

Make the e2e environment actually exercise the identity gate

Expose githubBaseUrl for GHES, and fix the e2e device-flow model

ADR 0030: authorization pre-flight owned by the orchestrator, outside the LLM

Implement ADR 0030 steps 4-5: batch pre-flight and sealed actor context

ADR 0030: record that the orchestrator needs no App credentials after all

e2e: skip happy-path with documented causes, harden fixtures

e2e: reclaim AgentRuns after the suite, and retract the capacity excuse

Reclaim terminal AgentRuns, and pin the credential/model boundary

ADR 0030 §6: principals, and a signed sender assertion

e2e: stop abandoned turns from starving later specs

Stop Skaffold shipping an eight-day-old core-controller

Roll fake-github when its script changes, instead of racing a restart

Add stub-agent, and un-skip the happy-path e2e spec

Extract AuthorizationService (ADR 0030 §1)

CD: apply CRDs on every deploy, and validate the whole CR catalog

Log one line per authorization verdict

Make the parked-turn hold configurable, and stop it starving the e2e suite

CD: preflight the cluster-scoped permission the CRD apply needs

CD: correct the CRD provenance claim, now that the real cluster is readable