Add Datadog credential issuance - #40

Open

santhosh-c1 wants to merge 51 commits into

mainfrom

santhosh.kumar/credential-issuance

Commits on Aug 19, 2026

Add Datadog credential issuance

santhosh-c1
and
c1-squire-dev[bot]
committed
da2ec5e

Commits on Aug 20, 2026

Update Datadog credential metadata

santhosh-c1
and
c1-squire-dev[bot]
committed
c89c75b
Add Datadog credential smoke test

santhosh-c1
and
c1-squire-dev[bot]
committed
062e16c
Log Datadog credential smoke lifecycle

santhosh-c1
and
c1-squire-dev[bot]
committed
e9936d3
Assert Datadog credential revocation

santhosh-c1
and
c1-squire-dev[bot]
committed
b332173
Wait for Datadog credential revocation

santhosh-c1
and
c1-squire-dev[bot]
committed
3929e1f
Verify revoked Datadog keys cannot authenticate

santhosh-c1
and
c1-squire-dev[bot]
committed
c5b7223
Require authentication failure after revocation

santhosh-c1
and
c1-squire-dev[bot]
committed
dfb3339
Wait for Datadog key propagation

santhosh-c1
and
c1-squire-dev[bot]
committed
72b7a90
Address Datadog credential review feedback

santhosh-c1
and
c1-squire-dev[bot]
committed
eac6963
Guard missing API key response data

santhosh-c1
and
c1-squire-dev[bot]
committed
9fae1c9
Clarify Datadog credential smoke validation

santhosh-c1
and
c1-squire-dev[bot]
committed
660a6d6
Address Datadog credential safety feedback

santhosh-c1
and
c1-squire-dev[bot]
committed
5634acb
Regenerate baton_capabilities.json

santhosh-c1
and
c1-squire-dev[bot]
committed
c1e8e85

Commits on Aug 21, 2026

Commits on Aug 22, 2026

fix: retarget credential issuance at Datadog service-account application keys

highb
and
c1-squire-dev[bot]
committed
1c18910
fix: address pr-review findings on the service-account application key rework

highb
and
c1-squire-dev[bot]
committed
49e8701
fix: add api_keys_write to capabilities, bound FindAPIKeyByName, fix hasMoreAPIKeyPages, add tests

highb
and
c1-squire-dev[bot]
committed
5b951d5
fix: run gofmt on connector files

highb
and
c1-squire-dev[bot]
committed
9b9b6b2
fix: correct advertised Datadog permissions; page app keys one page per call

highb
and
c1-squire-dev[bot]
committed
036b489
fix: scope service_account_write to the secrets types; sample the skip warning

highb
and
c1-squire-dev[bot]
committed
0228d6e
fix: reset the skip-warning sample counter at the start of each sync

highb
and
c1-squire-dev[bot]
committed
87c20bb
test: make the skip-warning assertions capable of failing

highb
and
c1-squire-dev[bot]
committed
819144e
feat: surface application-key scopes as resource profile data

highb
and
c1-squire-dev[bot]
committed
4cb1157
test: guard fake-provider state shared with handler goroutines

highb
and
c1-squire-dev[bot]
committed
c8845e7

Commits on Aug 24, 2026

fix: request a full users page, and stop letting a bad timestamp fail a sync

highb
and
c1-squire-dev[bot]
committed
4836a4f
docs: reattach the applicationKeyResource doc comment to its function

highb
and
c1-squire-dev[bot]
committed
d993c2a

Commits on Aug 26, 2026

fix: fail the sync when service-account application keys cannot be read

highb
and
c1-squire-dev[bot]
committed
f94798c
fix: distinguish 403 from 404 when service-account keys cannot be read

highb
and
c1-squire-dev[bot]
committed
4f6d211

Commits on Aug 27, 2026

chore: re-trigger CI

highb
and
c1-squire-dev[bot]
committed
25050be
chore(deps): vendor the baton-sdk credential type discriminator

highb
and
c1-squire-dev[bot]
committed
a7a4f61
fix(secrets): gate organization API key deletion on its own grant

highb
and
c1-squire-dev[bot]
committed
040d5ac
feat(secrets): issue both Datadog API key kinds, chosen by the caller

highb
and
c1-squire-dev[bot]
committed
4edb893
docs: regenerate connector metadata for the new flag and key kinds

highb
and
c1-squire-dev[bot]
committed
d716886

Commits on Aug 28, 2026

test(secrets): add a live smoke test for organization API key issuance

highb
and
c1-squire-dev[bot]
committed
8d6d0b8
fix(secrets): do not fail the sync on a disabled service account

highb
and
c1-squire-dev[bot]
committed
e11cbf5
test(secrets): probe the issued org key through the connector's own client

highb
and
c1-squire-dev[bot]
committed
057ddae
test(secrets): drop credential-shaped literals from the gate test

highb
and
c1-squire-dev[bot]
committed
1100f0a
chore(deps): pin baton-sdk v0.26.0

highb
and
c1-squire-dev[bot]
committed
2cba895
Merge pull request #41 from ConductorOne/highb/IGA-4073/credential-type-selection
highb
authored
d69f124
Merge main into the credential issuance branch

highb
and
c1-squire-dev[bot]
committed
8ddb68d
fix(credentials): revoke an application key without its parent id

highb
and
c1-squire-dev[bot]
committed
ed78713
docs: revocation no longer waits on the caller for the owner

highb
and
c1-squire-dev[bot]
committed
4bd1ae5
feat(secrets): gate service account application keys on their own grant

highb
and
c1-squire-dev[bot]
committed
bbff6ab
fix(credentials): keep the owner lookup's failure code, and stop paging

highb
and
c1-squire-dev[bot]
committed
6dd74a3
fix(lint): shorten the new flag's description, and align the docs to it

highb
and
c1-squire-dev[bot]
committed
2ff769b
docs: add the application-key flag to the self-hosted example

highb
and
c1-squire-dev[bot]
committed
e1fe609