Skip to content

ateapi: serve the ExternalVolumeClass access policy RPCs - #3851

Open
Vu Le (lekhoavu2909) wants to merge 35 commits into
agent-substrate:mainfrom
lekhoavu2909:evc-pr13-policy-handlers
Open

Vu Le (lekhoavu2909) wants to merge 35 commits into
agent-substrate:mainfrom
lekhoavu2909:evc-pr13-policy-handlers

Conversation

@lekhoavu2909

@lekhoavu2909 Vu Le (lekhoavu2909) commented Nov 14, 2026 •

Copy link
Copy Markdown
Collaborator

Implements the handlers for GetExternalVolumeClassAccessPolicy, CreateExternalVolumeClassAccessPolicy, UpdateExternalVolumeClassAccessPolicy and DeleteExternalVolumeClassAccessPolicy. Global owners can now grant a class to atespaces, and editors of those atespaces can then get the class. Stacked on #3847, which adds the policy storage and keeps the OpenFGA grants in sync

Part of #3754

AI use: AI-assisted, I reviewed and tested it.

No breaking change

  • Tests pass
  • Docs updated

regenerate ateapi.go, and register ExternalVolumeClass in apitool
TestBuild_Annotations.

Signed-off-by: Vu Le <vulk@google.com>
controlapi.ServiceImpl store pass-throughs

Signed-off-by: Vu Le <vulk@google.com>
table truncation and driver_name column test

Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
apitool example

Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
Signed-off-by: Vu Le <vulk@google.com>
workload_spec_test to EVC

Signed-off-by: Vu Le <vulk@google.com>
…rRole RBAC from ateapi

Signed-off-by: Vu Le <vulk@google.com>
….proto and apivalidation

Signed-off-by: Vu Le <vulk@google.com>
…xternal volume classes

Signed-off-by: Vu Le <vulk@google.com>
…m when an atespace is deleted

Signed-off-by: Vu Le <vulk@google.com>
and add CRUD policy on
evc in model.fga with OpenFGA model tests

Signed-off-by: Vu Le <vulk@google.com>
…licies

Signed-off-by: Vu Le <vulk@google.com>
@lekhoavu2909 Vu Le (lekhoavu2909) changed the title Evc pr13 policy handlers ateapi: serve the ExternalVolumeClass access policy RPCs Nov 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant