Skip to content

fix: update API groups in webhook configs and tests post-migration#21

Merged
ontave merged 7 commits into
mainfrom
session/21-remove-codebase-md
May 17, 2026
Merged

fix: update API groups in webhook configs and tests post-migration#21
ontave merged 7 commits into
mainfrom
session/21-remove-codebase-md

Conversation

@ontave
Copy link
Copy Markdown
Contributor

@ontave ontave commented May 17, 2026

Summary

  • Fix webhook configs: security.ontai.dev -> guardian.ontai.dev, infra.ontai.dev/runner.ontai.dev -> seam.ontai.dev
  • Fix epg_controller RunnerConfig GVK: runner.ontai.dev -> seam.ontai.dev
  • Fix integration test: finalizer name and lineage webhook testdata API group
  • Fix unit test mock apiVersion
  • Update CI: seam-core -> seam, add seam-sdk and platform checkouts

Test plan

  • Unit tests pass
  • Integration tests pass (lineage webhook now correctly intercepts guardian.ontai.dev CRDs)
  • CI passes on push

ontave added 6 commits May 17, 2026 23:49
… seam-core

Adds replace directive for github.com/ontai-dev/platform. Updates
cluster_rbacpolicy_controller to use platformseamv1alpha1.TalosCluster
from platform/api/seam/v1alpha1. Registers platform scheme in main.go.
All unit tests updated to use the platform types.
Replace seam-core -> seam in go.mod replace/require. Update all Go
import paths from github.com/ontai-dev/seam-core/ to
github.com/ontai-dev/seam/. Add seam-sdk replace + require.
Replace ../seam-core with ../seam following the seam-core -> seam
filesystem rename. Module path github.com/ontai-dev/seam was already
updated in Phase 4; this aligns the local path pointer.
… Guardian singleton

- Remove Guardian singleton CRD and types (Guardian, GuardianSpec, GuardianStatus, GuardianList)
- Remove setCNPGCondition and simplify RunWithRetry to 2-arg form (no kube client)
- Remove Scheme/Recorder/OperatorNamespace from BootstrapController; replace Guardian CR
  condition writes with in-memory WebhookModeGate and NamespaceEnforcementRegistry
- Fix one-way ratchet: return early after Initialising->ObserveOnly transition so Enforcing
  check only runs in the next reconcile
- Rename 7 CRD YAML files from security.ontai.dev_*.yaml to guardian.ontai.dev_*.yaml
- Update groupversion_info.go: group annotation and GroupVersion.Group to guardian.ontai.dev
- Update all finalizer constants, kubebuilder markers, GVR/GVK Group fields, apiVersion
  strings in unstructured objects across all guardian packages
Fresh documentation from current codebase. security.ontai.dev replaced with
guardian.ontai.dev throughout. Guardian singleton CR removed -- Deployment
readiness is the health signal. security-system namespace removed.
seam-core references replaced with seam. wrapper replaced with dispatcher.
LineageRecord and SeamMembership removed from guardian CRD table (owned by seam).
…gs and tests; fix runner.ontai.dev -> seam.ontai.dev in epg_controller; add seam-sdk/platform checkouts to CI
@ontave ontave force-pushed the session/21-remove-codebase-md branch from 50f4904 to 94d82c4 Compare May 17, 2026 21:49
@ontave ontave merged commit da885cd into main May 17, 2026
2 checks passed
@ontave ontave deleted the session/21-remove-codebase-md branch May 17, 2026 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant