Skip to content

Comments

Add ingress-authz-overlay for unified path-based routing with centralized auth#93

Merged
bwalsh merged 4 commits intofeature/ingressfrom
copilot/sub-pr-92
Nov 25, 2025
Merged

Add ingress-authz-overlay for unified path-based routing with centralized auth#93
bwalsh merged 4 commits intofeature/ingressfrom
copilot/sub-pr-92

Conversation

Copy link
Contributor

Copilot AI commented Nov 25, 2025

  • Read issue Feature Request: Authz-Aware Ingress Overlay for Multi-Tenant UIs and APIs #91 requirements
  • Analyze existing repository structure
  • Create helm/argo-stack/overlays/ingress-authz-overlay/Chart.yaml
  • Create helm/argo-stack/overlays/ingress-authz-overlay/values.yaml with route configuration
  • Create helm/argo-stack/overlays/ingress-authz-overlay/templates/_helpers.tpl
  • Create helm/argo-stack/overlays/ingress-authz-overlay/templates/ingress-authz.yaml for per-route Ingress resources
  • Create helm/argo-stack/overlays/ingress-authz-overlay/templates/authz-adapter.yaml for adapter deployment
  • Add ingressAuthzOverlay configuration block to helm/argo-stack/values.yaml
  • Create helm/argo-stack/overlays/ingress-authz-overlay/docs/authz-ingress-user-guide.md with Mermaid diagram
  • Create helm/argo-stack/overlays/ingress-authz-overlay/tests/authz-ingress.feature
  • Lint and validate the Helm chart
  • Create README.md for the overlay chart
  • Address code review comments (remove unused helpers, add container security context)
  • Run CodeQL security check
  • Add Let's Encrypt / cert-manager documentation

Summary

Implemented the complete ingress-authz-overlay Helm chart as specified in issue #91.

Documentation Added

  • TLS with Let's Encrypt and cert-manager section explaining:
    • How cert-manager automatically provisions certificates
    • ClusterIssuer configuration for letsencrypt-prod
    • Using letsencrypt-staging for testing
    • Certificate verification and troubleshooting commands

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Copilot AI self-assigned this Nov 25, 2025
Copilot AI and others added 2 commits November 25, 2025 00:20
Co-authored-by: bwalsh <47808+bwalsh@users.noreply.github.com>
…ntext

Co-authored-by: bwalsh <47808+bwalsh@users.noreply.github.com>
Copilot AI changed the title [WIP] Add authz-aware ingress overlay for multi-tenant UIs and APIs Add ingress-authz-overlay for unified path-based routing with centralized auth Nov 25, 2025
Copilot AI requested a review from bwalsh November 25, 2025 00:24
Copy link
Contributor

@bwalsh bwalsh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot

Document how letsencrypt-prod works

Co-authored-by: bwalsh <47808+bwalsh@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Nov 25, 2025

@copilot

Document how letsencrypt-prod works

Added documentation in commit a5ab69d. The user guide now includes a "TLS with Let's Encrypt and cert-manager" section covering:

  • How the ACME certificate flow works (with Mermaid diagram)
  • ClusterIssuer YAML for letsencrypt-prod
  • Using letsencrypt-staging for testing
  • Verification and troubleshooting commands

Copilot AI requested a review from bwalsh November 25, 2025 00:30
@bwalsh bwalsh marked this pull request as ready for review November 25, 2025 00:35
@bwalsh bwalsh merged commit 055fe70 into feature/ingress Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants