feat(endpoint-exposer): groups por ruta y autorización con header — spec requiere limpieza#18

Open

sebastiancorrea81 wants to merge 103 commits into

mainfrom

feature/avp-plugin

Commits on Jan 5, 2026

Commits on Jan 7, 2026

feat: if no service instance created allow continue without errors
javi-null
committed

Commits on Jan 8, 2026

feat: remove links
javi-null
committed

Commits on Jan 13, 2026

feat: add pre-commit hook to run tests

javi-null
and
claude
committed

Commits on Jan 15, 2026

feat: wip plugins
javi-null
committed

Commits on Jan 19, 2026

Commits on Jan 20, 2026

Commits on Jan 23, 2026

Commits on Jan 26, 2026

Commits on May 21, 2026

fix: escape quotes in visible_to gomplate expression to produce valid JSON
sebas_correa
committed
fix(endpoint-exposer): update domain enum to api-private.playground.nullapps.io

sebas_correa
and
claude
committed
feat(endpoint-exposer): generate AuthorizationPolicy per service from routes

sebas_correa
and
claude
committed
fix(endpoint-exposer): re-add idp.poc.nullapps.io to enum for backward compat

sebas_correa
and
claude
committed
revert(endpoint-exposer): remove idp.poc.nullapps.io from domain enum

sebas_correa
and
claude
committed
fix: remove output declarations from authz policy steps to unblock apply

sebas_correa
and
claude
committed
fix: export K8S_NAMESPACE from build_context so apply step can use it

sebas_correa
and
claude
committed
feat: create AuthorizationPolicy per scope DNS instead of publicDomain

sebas_correa
and
claude
committed
fix: read routes and application_id from CONTEXT directly in build_authz_policy

sebas_correa
and
claude
committed
fix: use --application_id (underscore) flag for np scope list

sebas_correa
and
claude
committed
fix: use correct gateway-name selector in AuthorizationPolicy

sebas_correa
and
claude
committed
feat: manage AVP Cedar policies from endpoint-exposer

sebas_correa
and
claude
committed
fix: add has operator for optional host attr and explicit error checking

sebas_correa
and
claude
committed

Commits on May 22, 2026

feat(endpoint-exposer): switch to global catch-all AuthorizationPolicy

sebas_correa
and
claude
committed
refactor(endpoint-exposer): derive HTTPRoute hostnames from scope domains

sebas_correa
and
claude
committed
fix(endpoint-exposer): remove trailing comma in service-spec after domain fields removal

sebas_correa
and
claude
committed
docs(endpoint-exposer): remove visibility and domain references from documentation

sebas_correa
and
claude
committed
feat(endpoint-exposer): implement read action to show live AVP Cedar policies

sebas_correa
and
claude
committed
fix(endpoint-exposer): enable read action button

sebas_correa
and
claude
committed
fix(endpoint-exposer): remove gomplate expression from read action spec for Terraform compatibility

sebas_correa
and
claude
committed
fix(endpoint-exposer): replace grep -P with BusyBox-compatible sed/grep -E in read_policies

sebas_correa
and
claude
committed
fix(endpoint-exposer): add || true to grep calls to avoid set -e failures on no-match

sebas_correa
and
claude
committed
fix(endpoint-exposer): use get-policy for full statement, simplify parsing

sebas_correa
and
claude
committed
fix(endpoint-exposer): use sed BRE for group extraction, more BusyBox-compatible

sebas_correa
and
claude
committed
Remove Authorization Group from uiSchema

sebas_correa
and
claude
committed
Add link-per-route model for AVP Cedar policy management

sebas_correa
and
claude
committed
Remove additionalKeywords from scope in route link spec

sebas_correa
and
claude
committed
feat(endpoint-exposer): add uiSchema to route link spec, remove routes from service spec

sebas_correa
and
claude
committed
fix(endpoint-exposer): remove visibleOn from input fields in route link spec

sebas_correa
and
claude
committed
feat(endpoint-exposer): render Authorized Groups in vertical column layout

sebas_correa
and
claude
committed

Commits on May 23, 2026

feat(endpoint-exposer): infer scope from link dimensions instead of form input

sebas_correa
and
claude
committed
feat(endpoint-exposer): support multiple routes per link

sebas_correa
and
claude
committed
fix(endpoint-exposer): shorten AVP policy description to fit 150-char limit

sebas_correa
and
claude
committed
feat(link-spec): allow editing routes after link creation

sebas_correa
and
claude
committed
feat(link-spec): make routes editable after link creation

sebas_correa
and
claude
committed
fix(link-spec): use "update" instead of "edit" for editableOn

sebas_correa
and
claude
committed
feat(link): add link-update workflow with proper scope and HTTPRoute reuse

sebas_correa
and
claude
committed
fix(link-update): use LINK_ID for stable HTTPRoute name across updates

sebas_correa
and
claude
committed
fix(link-update): add output to delete step so workflow runner continues

sebas_correa
and
claude
committed
fix(avp): replace exit 0 with conditional flow in delete scripts

sebas_correa
and
claude
committed
feat: add avp_policy_store_id param to service spec with auto-creation

sebas_correa
and
claude
committed
refactor(link): remove visibility field, derive gateway from scope type

sebas_correa
and
claude
committed
fix(unlink): derive HTTPROUTE_NAME from LINK_ID instead of stored attributes

sebas_correa
and
claude
committed
fix(create_policies): replace exit 0 with conditional to avoid killing workflow

sebas_correa
and
claude
committed
fix(update): remove duplicate store service results step from update.yaml

sebas_correa
and
claude
committed
fix(apply): remove exit 0 that killed workflow after apply step

sebas_correa
and
claude
committed

Commits on May 26, 2026

fix(link): pass scope name to process_routes and fix scope lookup

sebas_correa
and
claude
committed
fix(link): add ensure_policy_store step to link workflows

sebas_correa
and
claude
committed
fix(link): read avp_policy_store_id from service.attributes not service.parameters

sebas_correa
and
claude
committed
feat(service): delete AVP policy store on service deletion

sebas_correa
and
claude
committed
fix(service): ensure delete_policy_store step runs via include mechanism

sebas_correa
and
claude
committed
fix(service): persist avp_policy_store_id in service.attributes

sebas_correa
and
claude
committed
fix: persist avp store id early and fix delete workflow step ordering

sebas_correa
and
claude
committed
fix(avp): avoid exit 0 in delete_policies to prevent workflow termination

sebas_correa
and
claude
committed
fix(link): store policy_ids as string to satisfy NullPlatform API schema validation

sebas_correa
and
claude
committed
feat(avp): discover policy store via SSM instead of creating per-service stores

sebas_correa
and
claude
committed
feat(spec): remove avp_policy_store_id from service spec UI

sebas_correa
and
claude
committed
feat(avp): require avp_policy_store_id as mandatory UI input instead of SSM lookup

sebas_correa
and
claude
committed
fix(spec): translate avp_policy_store_id description to English and reference security module

sebas_correa
and
claude
committed