Story (Required)

The Manual Approval Gate (MAG) controller has been updated to support group-based approvals (e.g., group:dev-team). In this mode, instead of listing every individual user, the pipeline can delegate approval authority to an entire OpenShift Group. This is a critical feature for enterprise customers who manage permissions via LDAP/AD-synced groups. We need to ensure that the MAG controller correctly interfaces with the OpenShift User/Group API to validate these memberships during the approval flow.

Out of scope

• Testing of individual user approvals (covered in existing suites).

• Testing the opc CLI specifically (this test focuses on the Controller/API logic).

Done Checklist

• Code is completed, reviewed, documented and checked in
• Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
• Continuous Delivery pipeline(s) is able to proceed with new code included
• Customer facing documentation, API docs etc. are produced/updated, reviewed and published
• Acceptance criteria are met