Skip to content

Clean up duplicated RBAC shadow-compare paths#1464

Open
anniegracehu wants to merge 1 commit intocloud-ark:masterfrom
anniegracehu:annie/cleanup-rbac-duplicates
Open

Clean up duplicated RBAC shadow-compare paths#1464
anniegracehu wants to merge 1 commit intocloud-ark:masterfrom
anniegracehu:annie/cleanup-rbac-duplicates

Conversation

@anniegracehu
Copy link
Copy Markdown
Collaborator

@anniegracehu anniegracehu commented Apr 27, 2026

Summary

  • remove temporary RBAC shadow-compare scaffolding introduced for migration safety (_assert_rule_parity, _assert_all_resources_parity, and old/new dual-builder flow)
  • keep a single canonical consumer/provider RBAC rules builder (_build_consumer_rules, _build_provider_rules) and use it directly in apply paths
  • preserve existing runtime behavior, including provider -perms wildcard filtering via skip_wildcard=True

Test plan

  • python -m unittest tests.test_provider_kubeconfig.TestCli -v
  • KUBECONFIG=/path/to/kubeconfig python -m unittest tests.test_provider_kubeconfig -v

Drop old/new consumer/provider RBAC builders and parity-only checks, and use one canonical ruleset for each apply path while preserving current permissions behavior and provider perms wildcard filtering.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant