[dmt] feat: module rbac.yaml declaration, skeleton (merge only with #480) - #479

Open

Jabejixo wants to merge 58 commits into

mainfrom

Commits on Sep 21, 2026

rbac: add the rbac.yaml declaration format and the role-model contract constants
Jabejixo
committed
36d01d7
rbac: add the coverage rule -- every CRD of the module needs a decision in rbac.yaml
Jabejixo
committed
b51b44f
rbac: add the contract rule -- the platform's RBACv2 label and naming contract on rendered objects
Jabejixo
committed
a391a16
rbac: register contract and coverage, and give the declaration rules per-rule levels and exclusions
Jabejixo
committed
f2287f0
rbac: e2e cases for the contract and coverage rules
Jabejixo
committed
187090f
rbac: add the rbac.yaml generator -- an object model and the Helm templates rendered from it
Jabejixo
committed
0f47992
rbac: add the sync rule -- the rendered RBAC objects match rbac.yaml in both directions, and --fix regenerates the templates
Jabejixo
committed
6d9af36
rbac: e2e cases for the sync rule, rendering the generated templates through helm_lib
Jabejixo
committed
091c1de
rbac: refuse unknown keys in the rbac configuration blocks
Jabejixo
committed
fcf06b0
rbac: document the rbac.yaml declaration and the contract, coverage and sync rules
Jabejixo
committed
13a0e5c
errors: keep the autofix of an ignored finding off
Jabejixo
committed
d4df0d8
rbac: close the gaps found by checking the rules against the ADR and spec
Jabejixo
committed
3fc2f7a
rbac: start the declaration rules at warn wherever nothing sets them
Jabejixo
committed
404685e
rbac: recognize the RBACv2 scheme before DKP 1.78 and the version gate that serves both
Jabejixo
committed
7693c75
no-cyrillic: do not judge the localized RBAC annotations
Jabejixo
committed
053bcad
rbac: close the gaps the module lifecycle scenarios showed
Jabejixo
committed
94b62b9

Commits on Sep 22, 2026

Commits on Sep 23, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

test(e2e): link the rbac cases to the shared helm_lib archive
Jabejixo
committed
c1d2a0a

Commits on Sep 29, 2026

rbac: review of #479, the orphaned TODO and the dead .tpl case
Jabejixo
committed
7d8bc44