Skip to content

THV-0023: Remove configMapRef from MCPOIDCConfig#64

Merged
ChrisJBurns merged 1 commit intomainfrom
chrisburns/thv-0023-remove-configmap-from-oidc
Mar 31, 2026
Merged

THV-0023: Remove configMapRef from MCPOIDCConfig#64
ChrisJBurns merged 1 commit intomainfrom
chrisburns/thv-0023-remove-configmap-from-oidc

Conversation

@ChrisJBurns
Copy link
Copy Markdown
Contributor

Summary

  • Removes the configMapRef variant from MCPOIDCConfig since the CRD itself is a dedicated typed resource — its fields should always be specified inline rather than via ConfigMap indirection
  • Updates CEL validation rules and design decisions to reflect the simplified union (kubernetesServiceAccount or inline)

Test plan

  • Review that all references to configMapRef in MCPOIDCConfig context are removed
  • Confirm MCPAuthzConfig configMapRef is intentionally preserved (authz policies from ConfigMap is a distinct use case)

🤖 Generated with Claude Code

Since MCPOIDCConfig is a dedicated typed CRD, there is no need
for a configMapRef indirection — the type's own fields should
always be used inline. This simplifies the CEL union to just
kubernetesServiceAccount or inline.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@ChrisJBurns ChrisJBurns merged commit be1df4a into main Mar 31, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants