trident-acl-agent: rewrite as annotation-based ACL update agent - #730

Merged

bfjelds (bfjelds) merged 54 commits into

mainfrom

user/bfjelds/acl-agent-rollback-grpc-rust

Aug 27, 2026

Commits on Aug 26, 2026

trident-acl-agent: rewrite as annotation-based ACL update agent
bfjelds (bfjelds)
committed
46bb704
deny.toml: allow ISC and Zlib licenses

bfjelds (bfjelds)
and
Copilot
committed
b2b0d45
notice: allow ISC in about.toml, regenerate NOTICE

bfjelds (bfjelds)
and
Copilot
committed
f50d8d0
use explicit path for TAA.service ExecStart

bfjelds (bfjelds)
and
Copilot
committed
4083120
ci: re-trigger checks (transient license-mirror failure on prior run)

bfjelds (bfjelds)
and
Copilot
committed
2b0ac96
notice: run cargo fetch --locked before cargo-about to avoid flaky drops

bfjelds (bfjelds)
and
Copilot
committed
4005d77
ci: pin cargo-about to 0.9.2 to fix flaky NOTICE validation

bfjelds (bfjelds)
and
Copilot
committed
9c94249
docs: update design-doc link hash to eb7e534b2415ad52b37ef22fd49685e81e56c8aa

bfjelds (bfjelds)
and
Copilot
committed
ff724e9
trident-acl-agent: require server/appId/track on stage/finalize per accepted-design-v3

bfjelds (bfjelds)
and
Copilot
committed
e6b0cf6
trident-acl-agent: make annotation prefix configurable via env var

bfjelds (bfjelds)
and
Copilot
committed
fbdc241
trident-acl-agent: read current version from os-release, not aks-os-version

bfjelds (bfjelds)
and
Copilot
committed
d1ab40b
docs: add Trident ACL Agent explanation doc
bfjelds (bfjelds)
committed
254efde
docs: clarify stage queries Nebraska for the image; trim AKS wording
bfjelds (bfjelds)
committed
de9fb3a
trident-acl-agent: make os-release path configurable
bfjelds (bfjelds)
committed
b55802f
trident-acl-agent: default annotation prefix to acl.microsoft.com, version key to VERSION_ID

bfjelds (bfjelds)
and
Copilot
committed
93569f9
docs: scope Nebraska env vars to --validate-connection nebraska

bfjelds (bfjelds)
and
Copilot
committed
a714acc
docs: drop redundant Nebraska-vars callout, fix diagnostics example

bfjelds (bfjelds)
and
Copilot
committed
eb92ad3
spec: build trident-acl-agent package for all builds

bfjelds (bfjelds)
and
Copilot
committed
3310e3d
docs: simplify on-disk-version examples to one combined sample

bfjelds (bfjelds)
and
Copilot
committed
65af863
docs: describe status annotation fields and response codes

bfjelds (bfjelds)
and
Copilot
committed
5afa693
docs: clarify progress/result annotation phrasing

bfjelds (bfjelds)
and
Copilot
committed
b4b4285
docs: add Deployment section for installing trident-acl-agent

bfjelds (bfjelds)
and
Copilot
committed
e5ee169
trident-acl-agent: point comments at the ADO design doc, not a local copy

bfjelds (bfjelds)
and
Copilot
committed
a6d210e
trident-acl-agent: remove README.md, superseded by Trident-ACL-Agent.md

bfjelds (bfjelds)
and
Copilot
committed
86d038c
trident-acl-agent: address open Copilot review comments on PR 730

bfjelds (bfjelds)
and
Copilot
committed
f66f2ed
trident-acl-agent: fix suppressed Copilot review comments + drop obsolete Harpoon naming
bfjelds (bfjelds)
committed
0a29a08
trident-acl-agent: fix remaining Copilot review findings (PR 730)

bfjelds (bfjelds)
and
Copilot
committed
4845800
trident-acl-agent: rework current-version fallback into explicit always/error/custom modes

bfjelds (bfjelds)
and
Copilot
committed
3dbf636
trident-acl-agent: fix misleading watch_poll_interval doc in k8s.rs

bfjelds (bfjelds)
and
Copilot
committed
aa3c0a9
trident-acl-agent: restructure src into core/annotations/omahaonly modules
bfjelds (bfjelds)
committed
9e571a0
trident-acl-agent: fix remaining Copilot review findings (PR 730)
bfjelds (bfjelds)
committed
3052c5d
trident-acl-agent: redact Nebraska endpoint in connectivity-check logs
bfjelds (bfjelds)
committed
e9fd715
trident-acl-agent: address frhuelsz PR 730 review comments

bfjelds (bfjelds)
and
Copilot
committed
468b22e
trident-acl-agent: address PR 730 nit feedback

bfjelds (bfjelds)
and
Copilot
committed
7211354
trident-acl-agent: derive DEFAULT_STATE_PATH from a single STATE_FILE_NAME const
bfjelds (bfjelds)
committed
37e113e
trident-acl-agent: address remaining PR 730 nit-review gaps
bfjelds (bfjelds)
committed
5d6b9ba
Remove private msazure.visualstudio.com links from doc comments
bfjelds (bfjelds)
committed
e1099da
trident-acl-agent: drop "accepted design" phrasing and doc section refs
bfjelds (bfjelds)
committed
fabf34f
trident-acl-agent: drop docs/update-trigger-design.md path references
bfjelds (bfjelds)
committed
65c0c83
trident-acl-agent: remove unnecessary design-doc conformance heading comment
bfjelds (bfjelds)
committed
4d1bd7a
trident-acl-agent: remove duplicate top-level module docs
bfjelds (bfjelds)
committed
ee6e18e
trident-acl-agent: PathBuf kubeconfig, hostname crate, envy-based config, rename GoalSource to Mode
bfjelds (bfjelds)
committed
91cb35f
trident-acl-agent: add module-level docs, drop unused RebootHandle abstraction
bfjelds (bfjelds)
committed
91e6d1d
notice: update third-party attribution (envy crate)
bfjelds (bfjelds)
committed
a518f73
trident-acl-agent: fix stale doc comment referencing removed map_commit_result
bfjelds (bfjelds)
committed
8681a3e
trident-acl-agent, osutils: fix 3 copilot review comments
bfjelds (bfjelds)
committed
56ba5ee
trident-acl-agent: resolve logging module conflict with PR #751
bfjelds (bfjelds)
committed
1d7ca39

Commits on Aug 27, 2026