Initial commit

This commit is contained in:
Zhongwei Li
2025-11-30 08:35:24 +08:00
commit cdb1a82fcc
21 changed files with 771 additions and 0 deletions

View File

@@ -0,0 +1,21 @@
# skill_digest: e80c8209ad23b68350bd657d2e171ecdd9cf826b295b86a83aa85c585139552d
Based on the skill information, I can directly answer your question about how the ReleasePlanAdmission (RPA) references the ReleasePlan (RP) in Konflux:
The ReleasePlan (RP) and ReleasePlanAdmission (RPA) are intentionally placed in DIFFERENT namespaces:
- ReleasePlan (RP) is created in the TENANT namespace (your workspace)
- ReleasePlanAdmission (RPA) is created in the MANAGED namespace (platform team's controlled namespace)
Importantly, the RPA explicitly references the ReleasePlan across these namespace boundaries. This design allows:
1. Developers to define release plans in their tenant namespace
2. Platform engineers to manage release credentials and pipelines in a separate managed namespace
3. A cross-namespace reference that maintains separation of concerns
Key points:
- They do NOT need to be in the same namespace
- The RPA is manually created by a Platform Engineer
- The RPA references the RP using its name and namespace
- This allows secure management of release credentials while giving developers control over release plans
So to directly answer your questions:
- The RPA references the RP by its name and namespace
- They are INTENTIONALLY in different namespaces as a security and access control mechanism