Skip to content

feat(providers): add CLI label creation and filtering - #4265

Merged
johntmyers merged 3 commits into
mainfrom
docs/4250-workspace-provider-labels/johntmyers
Oct 13, 2026
Merged

johntmyers merged 3 commits into
mainfrom
docs/4250-workspace-provider-labels/johntmyers

Conversation

@johntmyers

@johntmyers johntmyers commented Oct 6, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Provider labels were available only through API creation, and provider lists could not filter them. Add CLI label creation, inspection, and filtering, and document the workspace and provider label workflows.

Related Issue

Closes #4250
Closes #4312

Changes

  • Add repeatable provider create --label KEY=VALUE, provider list --label-selector key=value,key2=value2, and labels in provider get output.
  • Add ListProvidersRequest.label_selector and reuse gateway selector filtering before pagination for named and all-workspaces scopes. Bind continuation tokens to the selector and preserve authorization and credential redaction.
  • Regenerate the checked-in Go protobuf bindings and update existing Rust request constructors.
  • Document workspace labels, provider labels, and create-time-only label semantics; update the public CLI skill.
  • Cover credential-source forwarding, malformed labels and selectors, filtered pagination, changed-selector tokens, workspace isolation, and secret redaction.

Testing

  • Rebased onto current main, preserving the ADC test environment isolation and regenerating Go bindings.

  • Updated the reviewed public schema fingerprint; durable and overlap fingerprints remain unchanged from main. All 2,078 gateway unit tests and 82 provider CLI integration tests and eight provider auto-creation tests passed after rebase.

  • Provider CLI parsing tests and both provider CLI integration suites passed.

  • Gateway label filtering tests, non-member authorization tests, and provider workspace-isolation test passed.

  • mise run sdk:ts:ci and mise run go:ci passed; Python protobuf generation passed.

  • mise run docs, Markdown lint, and git diff --check passed. Fern reported the existing gateway configuration MDX, unauthenticated redirect-check, and theme-contrast warnings.

  • Full mise run pre-commit passed through the commit hook.

  • Unit and integration tests added/updated.

  • E2E changes are not applicable; this does not change sandbox or deployment infrastructure.

Checklist

  • Follows Conventional Commits.
  • Commits are signed off (DCO).
  • Architecture documentation updates are not applicable; the existing metadata storage and pager are reused.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown

@johntmyers johntmyers added the area:cli CLI-related work label Oct 7, 2026
@johntmyers johntmyers changed the title docs: document workspace and provider labels feat(providers): add CLI label creation and filtering Oct 7, 2026

@johntmyers johntmyers left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

gator-agent

PR Review Status

The provider label workflow fits the linked issues, and the CLI, filtering, docs, and generated bindings were reviewed. One blocking finding remains: the added public protobuf field changes the schema fingerprint without updating its reviewed value, which is failing all three required Rust test jobs.

Action required: @johntmyers, update the reviewed public schema fingerprint and verify the focused inventory test before pushing a new head.

Blocking findings:

  • GATOR-5ed7c0d8-01: Update the public schema fingerprint for the new selector field; details are inline.

Carried findings: None.

Gator metadata
  • Validation: Maintainer-authored provider CLI feature and label documentation covered by #4250 and #4312.
  • Docs: Relevant Fern provider and workspace pages, plus the public CLI skill, are updated.
  • Checks: Branch Checks fails on x86_64-linux, aarch64-linux, and aarch64-darwin at the same schema inventory assertion. DCO, Helm gate, and Trivy gate pass.
  • E2E: No additional test dispatch in this cycle; review feedback must be addressed before pipeline handoff.
  • Head SHA: 5ed7c0d81e2f432f005efa035193e7620f65dce3
  • Base SHA: 9a6148fc988a5e7a20a43805a52fdfaad766f8ae
  • Merge base SHA: 0bca9fb8280045224c910610cba005b7fa5a6a83
  • Patch ID: 0eb5b5f7761c4e39006eaede310ca7b0fe1e8967
  • Gator payload: 11
  • Review mode: initial
  • Previous reviewed SHA: none
  • Review budget exhausted: no
  • Maintainer decision required: no
  • Next state: gator:in-review

Comment thread proto/openshell.proto
@johntmyers johntmyers added gator:in-review Gator is reviewing or awaiting PR review feedback gator:blocked Gator is blocked by process or repository gates and removed gator:in-review Gator is reviewing or awaiting PR review feedback labels Oct 9, 2026
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
@johntmyers
johntmyers force-pushed the docs/4250-workspace-provider-labels/johntmyers branch from 5ed7c0d to eb012bf Compare October 12, 2026 23:40
@johntmyers

Copy link
Copy Markdown
Collaborator Author

/ok to test eb012bf

@johntmyers johntmyers added the test:e2e Requires end-to-end coverage label Oct 13, 2026
@github-actions

Copy link
Copy Markdown

Label test:e2e applied for eb012bf. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

@johntmyers johntmyers left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

gator-agent

PR Review Status

Thanks @johntmyers, I checked your schema fingerprint fix and preservation of scoped credential test environments after the rebase. The independent follow-up review found no new blocking findings; the earlier schema finding remains resolved, and all three current-head Rust test jobs pass. The provider and workspace label docs and CLI skill cover the user-facing workflow.

The standard E2E suite is now running on the current head with test:e2e, after the label bot requested a rerun. Gator will inspect its results next cycle.

Blocking findings: None.

Carried findings: None; GATOR-5ed7c0d8-01 remains resolved. The updated public fingerprint accounts for the selector field, while durable and overlap fingerprints are unchanged from the rebased main tree.

Gator metadata
  • Validation: Maintainer-authored provider CLI label creation and filtering covered by #4250 and #4312.
  • Docs: Relevant Fern provider/workspace pages and public CLI skill updated.
  • Checks: Branch Checks, Helm Lint, Trivy Changes, and DCO pass on the current head; no maintainer approval is present.
  • E2E: test:e2e applied; Branch E2E Checks run 38323413779, attempt 2, is in progress on the current head. The mirror is current, and the existing full-SHA /ok to test remains sufficient.
  • Head SHA: eb012bfdd6f2656cfe824e3309f5fe8786b6fab6
  • Base SHA: fe316067dc2503062235106b886c206e9d8ca079
  • Merge base SHA: 01c249f225ef43346c9606369974819553b334c3
  • Patch ID: a895da2d5cd7f0f67468abce29b50009bf25b553
  • Gator payload: 12
  • Review mode: follow_up
  • Previous reviewed SHA: 5ed7c0d81e2f432f005efa035193e7620f65dce3
  • Review budget exhausted: no
  • Maintainer decision required: no
  • Next state: gator:watch-pipeline

@johntmyers johntmyers added gator:watch-pipeline Gator is monitoring PR CI/CD status gator:approval-needed Gator completed review; maintainer approval needed and removed gator:blocked Gator is blocked by process or repository gates gator:watch-pipeline Gator is monitoring PR CI/CD status labels Oct 13, 2026
@johntmyers johntmyers added gator:merge-ready and removed gator:approval-needed Gator completed review; maintainer approval needed labels Oct 13, 2026
@johntmyers
johntmyers added this pull request to the merge queue Oct 13, 2026
Merged via the queue into main with commit 0b1f6f8 Oct 13, 2026
151 of 155 checks passed
@johntmyers
johntmyers deleted the docs/4250-workspace-provider-labels/johntmyers branch October 13, 2026 16:28
@johntmyers

Copy link
Copy Markdown
Collaborator Author

gator-agent

Monitoring Complete

Monitoring is complete because this PR has merged. The last Gator state was merge-ready, with maintainer approval and successful required CI and E2E gates.

I am removing the active gator:* label because there is nothing left for Gator to monitor on this PR.

Gator metadata
  • Head SHA: eb012bfdd6f2656cfe824e3309f5fe8786b6fab6
  • Gator payload: 12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:cli CLI-related work area:providers test:e2e Requires end-to-end coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat(providers): support CLI label creation, inspection, and filtering docs: document workspace and provider label capabilities

2 participants