Skip to content

Add connect protocol, named ports, and legacyHosts to controlplane chart#236

Merged
mhotan merged 3 commits intomainfrom
mike/selfhosted-controlplane
Mar 3, 2026
Merged

Add connect protocol, named ports, and legacyHosts to controlplane chart#236
mhotan merged 3 commits intomainfrom
mike/selfhosted-controlplane

Conversation

@mhotan
Copy link
Contributor

@mhotan mhotan commented Feb 18, 2026

Summary

Foundation chart changes for self-hosted control plane deployments.

  • Add connect protocol support for gRPC services (buf connect-go)
  • Switch from hardcoded port numbers to named ports across services
  • Add selfServeConfig.legacyHosts to base values.yaml (consolidated from per-cloud overlay files)

The legacyHosts config tells LegacyOrgRewrite middleware to rewrite org back to "" for legacy hosts. Both SetSelfServeConfig() and singleTenantOrgID gracefully handle empty strings, so this is safe for non-selfhosted deployments where UNION_ORG is empty.

Test plan

  • helm template renders correctly with and without UNION_ORG set
  • Verify connect protocol endpoints are accessible
  • Verify named ports resolve correctly in service discovery

@aviator-app
Copy link
Contributor

aviator-app bot commented Feb 18, 2026

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This PR was merged manually (without Aviator). Merging manually can negatively impact the performance of the queue. Consider using Aviator next time.


See the real-time status of this PR on the Aviator webapp.
Use the Aviator Chrome Extension to see the status of your PR within GitHub.

@mhotan mhotan force-pushed the mike/selfhosted-controlplane branch 2 times, most recently from 0f63396 to adc5dca Compare February 19, 2026 22:57
@mhotan mhotan force-pushed the mike/selfhosted-controlplane branch 4 times, most recently from a8ab8ef to 0820357 Compare February 21, 2026 18:54
@mhotan mhotan force-pushed the mike/selfhosted-controlplane branch 2 times, most recently from f102b2b to 59e6b8b Compare February 28, 2026 00:56
@mhotan mhotan changed the title Add connect protocol support and named ports to controlplane chart Add connect protocol, named ports, and legacyHosts to controlplane chart Feb 28, 2026
mhotan and others added 3 commits March 2, 2026 17:23
- Add connectPort to sharedService config for services that support
  connect-rpc (authorizer, cluster, usage)
- Fix _helpers.tpl to use toYaml for sharedService and sync helpers
- Switch all service/ingress port references from numbers to named
  ports for clarity and connect protocol routing
- Add named ports to cacheservice deployment
- Update generated test fixtures

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Configure UNION_ORG as a legacy host in selfServeConfig so the
LegacyOrgRewrite middleware rewrites org to "" on incoming requests.
This fixes ENG26-237 where admin client wrapper unconditionally stamps
org from identity context, but projects are seeded with org="".

Safe for non-selfhosted deployments: SetSelfServeConfig skips empty
strings, so legacyHosts: [''] is a no-op when UNION_ORG is unset.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Update expected helm template output to reflect the
selfServeConfig.legacyHosts addition to values.yaml.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@mhotan mhotan force-pushed the mike/selfhosted-controlplane branch from e45fc2e to e1c98e2 Compare March 3, 2026 01:24
@mhotan mhotan merged commit b935e30 into main Mar 3, 2026
4 checks passed
@mhotan mhotan deleted the mike/selfhosted-controlplane branch March 3, 2026 01:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants