opendefensecloud / solution-arsenal / 25343901139

72%

Build Type

push

github

Committed by web-flow

Commit Message

feat: poc implementation resource grants for common use cases (#474)

## What
Implements a ResourceGrant CRD enabling three cross-namespace reference
patterns: Profile→Target, Target→Registry, and Release→ComponentVersion
Closes #314

## Testing
Integration and e2e Tests were added

## Notes for reviewers
- New CRD: ResourceGrant
- ReleaseSpec gains componentVersionNamespace (optional string).
Same-namespace behaviour is unchanged.
- TargetSpec gains renderRegistryNamespace (optional string).
Same-namespace behaviour is unchanged.


## Checklist
- [x] Tests added/updated
- [x] No breaking changes (or upgrade path documented above)
- [x] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## New Features

- Added `ResourceGrant` API resource to authorize cross-namespace
resource access
- Releases can now resolve ComponentVersions from different namespaces
- ReleaseBindings can target Targets in different namespaces
- Targets can reference render Registries from different namespaces
- Profile matching now supports selecting Targets across namespaces

## Documentation

- Updated API reference with `ResourceGrant` specification and new
namespace field documentation

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Coverage Stats

214 of 372 new or added lines in 4 files covered. (57.53%)

17 existing lines in 2 files now uncovered.

2258 of 3198 relevant lines covered (70.61%)

42.52 hits per line