Add MCPAuthzConfig CRD for backend-agnostic authorization#4777

Merged

ChrisJBurns merged 25 commits into

mainfrom

jaosorior/mcpauthzconfig-crd

Jun 12, 2026

Commits on May 29, 2026

Commits on Jun 1, 2026

Merge branch 'main' into jaosorior/mcpauthzconfig-crd
ChrisJBurns
authored

Commits on Jun 11, 2026

Guard reserved ConfigKey values and tighten MCPAuthzConfig.Validate

ChrisJBurns
and
claude
committed
Canonicalize MCPAuthzConfig spec before hashing

ChrisJBurns
and
claude
committed
Use MutateAndPatchStatus/Spec in MCPAuthzConfig controller

ChrisJBurns
and
claude
committed
Tighten MCPAuthzConfig reconcile flow

ChrisJBurns
and
claude
committed
Unexport buildFullAuthzConfigJSON

ChrisJBurns
and
claude
committed
Declare mcpservers RBAC marker on MCPAuthzConfig controller

ChrisJBurns
and
claude
committed
Test condition preservation and last-ref finalizer transition

ChrisJBurns
and
claude
committed
Add envtest for authzConfig/authzConfigRef mutual exclusion

ChrisJBurns
and
claude
committed
Reframe AuthzConfigRef as part 1 of 2 in godocs

ChrisJBurns
and
claude
committed
Regenerate CRD manifests and reference docs

ChrisJBurns
and
claude
committed
Merge remote-tracking branch 'origin/main' into jaosorior/mcpauthzconfig-crd
ChrisJBurns
committed
Use compound (kind, name) listMapKey on ReferencingWorkloads

ChrisJBurns
and
claude
committed
Refresh validateAuthzConfig doc comment

ChrisJBurns
and
claude
committed
Thread factory through buildFullAuthzConfigJSON, drop redundant lookups

ChrisJBurns
and
claude
committed
Drop marshalJSONString in favor of strconv.Quote

ChrisJBurns
and
claude
committed
Demote hash-change log to DEBUG

ChrisJBurns
and
claude
committed
Mark AuthzConfigRef staging NOTE with TODO(#4778)

ChrisJBurns
and
claude
committed
Lock ConfigKey()/struct tag contract per backend

ChrisJBurns
and
claude
committed
Tighten test docstrings, fixtures, and assertions

ChrisJBurns
and
claude
committed
Update cmd/thv-operator/controllers/mcpauthzconfig_controller.go

ChrisJBurns
and
jhrozek
authored
Remove unused strconv import

ChrisJBurns
and
claude
committed
Merge branch 'main' into jaosorior/mcpauthzconfig-crd
ChrisJBurns
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add MCPAuthzConfig CRD for backend-agnostic authorization#4777

Add MCPAuthzConfig CRD for backend-agnostic authorization#4777
ChrisJBurns merged 25 commits into
mainfrom
jaosorior/mcpauthzconfig-crd

Commits on May 29, 2026

Add MCPAuthzConfig CRD for backend-agnostic authz

Add mcpauthzconfigs to RBAC E2E golden fixtures

Commits on Jun 1, 2026

Merge branch 'main' into jaosorior/mcpauthzconfig-crd

Commits on Jun 11, 2026

Guard reserved ConfigKey values and tighten MCPAuthzConfig.Validate

Canonicalize MCPAuthzConfig spec before hashing

Use MutateAndPatchStatus/Spec in MCPAuthzConfig controller

Tighten MCPAuthzConfig reconcile flow

Unexport buildFullAuthzConfigJSON

Declare mcpservers RBAC marker on MCPAuthzConfig controller

Test condition preservation and last-ref finalizer transition

Add envtest for authzConfig/authzConfigRef mutual exclusion

Reframe AuthzConfigRef as part 1 of 2 in godocs

Regenerate CRD manifests and reference docs

Merge remote-tracking branch 'origin/main' into jaosorior/mcpauthzconfig-crd

Use compound (kind, name) listMapKey on ReferencingWorkloads

Refresh validateAuthzConfig doc comment

Thread factory through buildFullAuthzConfigJSON, drop redundant lookups

Drop marshalJSONString in favor of strconv.Quote

Demote hash-change log to DEBUG

Mark AuthzConfigRef staging NOTE with TODO(#4778)

Lock ConfigKey()/struct tag contract per backend

Tighten test docstrings, fixtures, and assertions

Update cmd/thv-operator/controllers/mcpauthzconfig_controller.go

Remove unused strconv import

Merge branch 'main' into jaosorior/mcpauthzconfig-crd