feat(api)!: scope by kind — per-item WatchRule source namespaces, cluster-only ClusterWatchRule - #259

Merged

sunib merged 18 commits into

mainfrom

feat/watchrule-source-namespace-pr4

Jul 21, 2026

Commits on Jul 20, 2026

feat(watch): add WatchRule.spec.sourceNamespace and its authorization gate

sunib
and
claude
committed
39db8f5

Commits on Jul 21, 2026

docs: starting to consider alternative approach
sunib
committed
a4ef071
docs: include the deletion modes
sunib
committed
fbac697
docs: redirect PR 4 to scope-by-kind and align field names

sunib
and
claude
committed
388f794
feat(api)!: move sourceNamespace onto WatchRule rules[], narrow ClusterWatchRule scope

sunib
and
claude
committed
15fa338
refactor(authz): resolve a WatchRule's whole per-item source scope

sunib
and
claude
committed
72d1a2c
refactor(watch): carry the resolved source scope through compile and planning

sunib
and
claude
committed
98055c0
feat(watch)!: ClusterWatchRule becomes cluster-scope-only

sunib
and
claude
committed
30c75b4
feat(status): aggregate source-namespace authorization per rule item

sunib
and
claude
committed
52412f6
docs: scope by kind, plus the PR 4 migration guide

sunib
and
claude
committed
0c3db0a
test(e2e): make the wildcard spec prove the wildcard

sunib
and
claude
committed
638878e
fix(placement): prove namespace-agnosticism before reusing a cohort

sunib
and
claude
committed
08e91e6
test(e2e): one GitTarget with two source namespaces keeps them apart

sunib
and
claude
committed
cf55c5f
fix(watch): key a source-namespace policy on the target's own cluster

sunib
and
claude
committed
ff3b0cb
fix(controller): forget a deleted WatchRule's retained source scope

sunib
and
claude
committed
08720fc
fix(api)!: reject a namespace pattern in a policy, and trim CRD descriptions

sunib
and
claude
committed
62e35a6
docs: correct the PR 4 migration guidance and record the review follow-ups

sunib
and
claude
committed
80899d2
refactor(api)!: delete WatchRule.spec.sourceNamespace instead of deprecating it

sunib
and
claude
committed
5218598

Navigation Menu

Uh oh!

feat(api)!: scope by kind — per-item WatchRule source namespaces, cluster-only ClusterWatchRule - #259

feat(api)!: scope by kind — per-item WatchRule source namespaces, cluster-only ClusterWatchRule#259
sunib merged 18 commits into
mainfrom
feat/watchrule-source-namespace-pr4

Commits on Jul 20, 2026

feat(watch): add WatchRule.spec.sourceNamespace and its authorization gate

Commits on Jul 21, 2026

docs: starting to consider alternative approach

docs: include the deletion modes

docs: redirect PR 4 to scope-by-kind and align field names

feat(api)!: move sourceNamespace onto WatchRule rules[], narrow ClusterWatchRule scope

refactor(authz): resolve a WatchRule's whole per-item source scope

refactor(watch): carry the resolved source scope through compile and planning

feat(watch)!: ClusterWatchRule becomes cluster-scope-only

feat(status): aggregate source-namespace authorization per rule item

docs: scope by kind, plus the PR 4 migration guide

test(e2e): make the wildcard spec prove the wildcard

fix(placement): prove namespace-agnosticism before reusing a cohort

test(e2e): one GitTarget with two source namespaces keeps them apart

fix(watch): key a source-namespace policy on the target's own cluster

fix(controller): forget a deleted WatchRule's retained source scope

fix(api)!: reject a namespace pattern in a policy, and trim CRD descriptions

docs: correct the PR 4 migration guidance and record the review follow-ups

refactor(api)!: delete WatchRule.spec.sourceNamespace instead of deprecating it