• Product / Portfolio Work
    • 2
    • False
    • Hide

      None

      Show
      None
    • False

      Description:
      Currently, the mtv-integrations webhook checks authorization on the destination Provider for all Plans, regardless of how the Provider was created.This causes issues when a user manually creates a Provider and attempts to create a Plan using that Provider—authorization fails in this scenario.

      To address this, update the webhook logic to only perform authorization checks if the destination Provider in the Plan was created by the mtv-integrations controller. These automatically created Providers have a -mtv suffix in their name.

      This change ensures that manually created Providers are excluded from webhook authorization checks, allowing users to proceed with custom Plans.

      Acceptance Criteria

      1. Suffix-Based Filtering
        The webhook must only perform authorization checks on destination Providers whose names end with -mtv.
      1. Skip Manual Providers
        If the destination Provider does not have the -mtv suffix (i.e., manually created), the webhook must skip the authorization check.
      1. No Impact to Existing Behavior
        Plans using -mtv Providers must continue to undergo authorization checks as before.
      1. Test Coverage
        Unit or integration tests must validate:
        • Authorization is triggered for -mtv Providers.
        • Authorization is skipped for non--mtv Providers.

              yikim@redhat.com Yi Rae Kim
              yikim@redhat.com Yi Rae Kim
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: