Skip to content

Merge pull request #323 from unionai/main#324

Open
fiedlerNr9 wants to merge 38 commits into
mainfrom
jan/wip-selfhosted
Open

Merge pull request #323 from unionai/main#324
fiedlerNr9 wants to merge 38 commits into
mainfrom
jan/wip-selfhosted

Conversation

@fiedlerNr9

Copy link
Copy Markdown
Contributor

update

@aviator-app

aviator-app Bot commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This pull request is currently open (not queued).

How to merge

To merge this PR, comment /aviator merge or add the mergequeue label.


See the real-time status of this PR on the Aviator webapp.
Use the Aviator Chrome Extension to see the status of your PR within GitHub.

jmonty42 and others added 18 commits April 21, 2026 10:55
…ues file

Documents how to configure the identity service with provider: azure when
using Entra ID, using outputs from the authn/entraid Terraform module.
Includes an extraObjectsOverrides ExternalSecret example to merge the
Graph API client secret from GCP Secret Manager into the shared K8s secret.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add service override to suppress dangling connect port (83) that
  would have targeted a non-existent named container port
- Fix azure clientSecretName example: remove erroneous union/ prefix
  (K8s secret keys cannot contain slashes)
- Remove FLYTEADMIN_ENDPOINT reference from base values; endpoint is
  environment-specific and should be set via overlay values

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Snapshots updated to reflect Mike's PRs #348-#353 (base values consolidation,
organizations service, OIDC globals) plus the identity service defaults from this PR.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The identity service registers both gRPC and Connect hooks. Both
defaulted to port 8080 causing a bind conflict on startup. Add
sharedService.connectPort: 8081 to move the Connect server to 8081.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The upstream flyte-core chart doesn't render the `private` config section
into a separate YAML file. This adds a new ConfigMap template that renders
`.Values.flyte.configmap.adminServer.private` into `private.yaml` and mounts
it at `/etc/flyte/config/private.yaml` via additionalVolumeMounts.

This enables flyteadmin-private config like `logoutUrl` and
`supportsTokenRevocation` to be read from Helm values rather than requiring
changes to the flyte-core subchart.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Mount private-config to /etc/flyte/private/ instead of attempting
a subPath mount into /etc/flyte/config/ which conflicts with the
existing clusters-config-volume projected mount. Update configPath
to /etc/flyte/*/*.yaml to include both config directories.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@fiedlerNr9 fiedlerNr9 force-pushed the jan/wip-selfhosted branch from ab59003 to 67b52c2 Compare May 5, 2026 16:10
katrogan and others added 3 commits May 7, 2026 15:10
Signed-off-by: Katrina Rogan <katroganGH@gmail.com>
Signed-off-by: Katrina Rogan <katroganGH@gmail.com>
@fiedlerNr9 fiedlerNr9 force-pushed the jan/wip-selfhosted branch from 9a5f5a2 to 4c2636a Compare May 7, 2026 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants