Skip to content

feat(env_aws): support eks access entries - #291

Open
ianaya89 wants to merge 2 commits into
masterfrom
feat/aws-eks-access-entries
Open

ianaya89 wants to merge 2 commits into
masterfrom
feat/aws-eks-access-entries

Conversation

@ianaya89

Copy link
Copy Markdown
Member

Adds eks_access_entries to altinitycloud_env_aws (resource and data source), exposing the IAM principals granted access to the environment's EKS API added to the public API in Altinity/cloud#1888.

  • set of {principal_arn, access_level}, max 8, ADMIN / READ_WRITE / READ_ONLY
  • update sends the whole list, matching the API's replace semantics
  • unique-name set validator generalized to UniqueObjectAttribute, shared with external buckets

The separate chore: sync graphql sdk commit picks up unrelated prod drift: prod now serves mfa, and the ClickHouse cluster/keeper inputs are gone from both prod and dev, so the ClickHouse feature branches can no longer regenerate.

Prod and dev schemas are now identical: prod serves mfa, and the
ClickHouse cluster/keeper inputs are no longer declared by either.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 17, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-17T19:12:50.268894Z 65242bd PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 65242bd2e9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

detail func(value string) string
}

// UniqueObjectAttribute rejects sets whose object elements repeat a value for the given string attribute.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove the restating helper comment

Remove this comment because it merely paraphrases the function name and signature rather than documenting a non-obvious invariant or external constraint; the repository explicitly prohibits comments that restate what code does and doc comments on short functions.

AGENTS.md reference: AGENTS.md:L94-L97

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed in bcc66f1, along with the description param that made the call sites read as positional string soup.

Exposes eksAccessEntries, added to the public API in Altinity/cloud#1888:
the IAM principals granted access to the environment's EKS API.

Modeled as a set because order is irrelevant and the API replaces the
whole list on update. Capped at 8 entries, principals must be unique.
The set validator that enforced unique external bucket names is now a
generic UniqueObjectAttribute shared by both.
@ianaya89
ianaya89 force-pushed the feat/aws-eks-access-entries branch from 65242bd to bcc66f1 Compare September 17, 2026 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant