nogoo9 / no-crd / 28807596799

66%

Build Type

push

github

Committed by web-flow

Commit Message

feat(spawner): non-blocking upgrades & version bump to v0.12.0 (#34)

* feat(spawner): non-blocking upgrades & version bump to v0.12.0

- Implemented background asynchronous processing for running workspace upgrades (ADR-024).
- Added fallback recreate flow for RWO PVC volumes to avoid lock conflicts.
- Stored detailed failure diagnostics on old pods via `nogoo9/last-upgrade-error` annotation.
- Refactored spawner package structure, moving handlers and tests into `src/mcp/spawner/`.
- Hardened package safety by overriding vulnerable sub-dependencies (`dompurify`, `form-data`, `undici`).
- Documented the upgrade design and updated development rules.

* fix(auth): restrict raw pod writes and make E2E scripts robust

- Restricted raw pod write actions ("write") to admin and write roles in verifyAccessOrThrow.
- Restored create_pod, delete_pod, and patch_pod tools to check "write" action.
- Configured test-e2e-auth.ts cookie path verification to dynamically match the BASE_URL prefix.
- Handled race conditions in e2e-peer-discovery.sh when replica pods terminate concurrently during rollout.

* feat(ui): prevent workspace ID regeneration and prefix with user sub

- Used a React ref in SpawnWorkspaceModal to initialize the workspace ID only once, avoiding regeneration during background polling updates.
- Prefixed generated workspace IDs with the active user's username/sub to ensure uniqueness across users.
- Added client-side duplicate validation warning on form submission.

* refactor(tests): use execFileSync in upgrade E2E script

- Switched from execSync to execFileSync for runKubectl execution to avoid subshell parsing.
- Refactored ConfigMap template apply to pipe input securely using execFileSync.

* fix(spawner): resolve user variable interpolation in non-auth mode

- Allowed verifyAuthAndGetContext to attempt user identity extraction when auth is disabled.
- Updated templateUser fallback logic to preserve extracted user identity if provided in non-au... (continued)

Coverage Stats

376 of 1864 new or added lines in 13 files covered. (20.17%)

17 existing lines in 1 file now uncovered.

6762 of 10236 relevant lines covered (66.06%)

18.47 hits per line