Skip to content

docs: DG debt wave 3 part 2 — rename follow for views, 900 s credentials, grant leftovers - #55

Merged
viethqb merged 1 commit into
mainfrom
docs/dg-wave3-part2
Nov 1, 2026
Merged

viethqb merged 1 commit into
mainfrom
docs/dg-wave3-part2

Conversation

@viethqb

@viethqb viethqb commented Nov 1, 2026

Copy link
Copy Markdown
Member

Docs for DG debt Wave 3 part 2: platform #811 (P5b), #812 (P8), #813 (P6), #814 (P9), #815 (P10). All five are merged on platform main (19e41645).

Known issues

  • Closed: KI-319 and KI-320 (#814), KI-324 (#815), KI-329, KI-330 and KI-331 (#811).
  • Updated: KI-315 stays open as a limitation; credentials now live up to 15 minutes (catalog.sts_token_validity_seconds, default 900). Revocation is still not immediate and the shared key stays. StarRocks after expiry is recorded as not verified.
  • New: KI-332, PUT /api/control-plane/engines/{id} moving an engine to another profile bumps the old and new profile in one UPDATE (migration 0187's trigger) in no fixed order (found in #813, not reproduced).
  • No existing row covered platform #790 to #792. #813's retryable 409 is described in the intro and on the pages.
  • Intro updated.

Pages

  • Configuration keys: catalog.sts_token_validity_seconds and its start-up check.
  • Catalog detail: Storage credentials follow the grant (15 minutes, the key, cache reuse), view catalog grants follow renames, limits.
  • Grants: Renames and drops covers views (new Rename a view) and pattern hand-written policies (new refusal row); KI-319 warnings removed.
  • Policy editor, Classifications tagging, Check access, FAQ: KI-319/KI-320 wording replaced.
  • Clearance and REST API index: the 409 profile_set_changed (retryable: true), retry.
  • Groups: deleting a local group deletes its grants. Members: last ws_admin 409 and deny-only membership.
  • Catalog storage errors: 15 minutes.
  • Upgrade: notes for #811 to #815 (migration 0212).
  • REST reference regenerated from platform main's openapi.json; only the pages these PRs changed are committed (control-plane-catalog, control-plane-tags). The workflow page also differed and is left for its own PR.

Not in this PR

  • Screenshots (Wave 4). No existing screenshot shows changed UI. A new shot of the Clearance tab's profile_set_changed alert could be added.
  • The username-reuse report and Data API invoke re-grant fixes in #815 are not described in the docs (no page covers those cases), so they are not mentioned.

npm run build passes (en and vi).

🤖 Generated with Claude Code

…als, grant leftovers

Platform #811-#815:
- close KI-319, KI-320, KI-324, KI-329, KI-330, KI-331; narrow KI-315
  (vended credentials live 15 minutes); add KI-332 (engine rebind
  through PUT bumps two profiles in no fixed order)
- document catalog.sts_token_validity_seconds, the retryable 409
  profile_set_changed, view renames and pattern hand-written policy
  checks, group delete removing its grants, and the live-allow rule
  for workspace membership and the last ws_admin
- upgrade notes for #811-#815; regenerate the affected REST pages

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@viethqb
viethqb merged commit 7597aaa into main Nov 1, 2026
1 check passed
@viethqb
viethqb deleted the docs/dg-wave3-part2 branch November 1, 2026 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant