Skip to content

Zitadel deployment: parameterize dev scaffolding + fix authenticated-suggester submit 500 #204

Description

@damienriehl

Tracking issue for the U7 Zitadel-on-DEV work (roundup plan U7/KTD9, executed and verified live on DEV 2026-08-09/10).

Scope:

  1. Parameterize the Zitadel dev scaffoldingcompose.yaml and scripts/setup-zitadel.sh hardcode localhost and throwaway secrets (masterkey, admin password, 2030 PAT expiries, secret echo to stdout). Every deployment-varying value becomes env-overridable with local-dev-preserving defaults; secret output masked by default with --show-secrets opt-in.
  2. Fix suggester submit 500MissingGreenlet in SuggestionService._create_pr_for_session: an authenticated non-editor takes the 403-fallback _create_pr_directly, which returns an ORM PullRequest whose attributes expire after later commits; the notification block's attribute access then does sync IO in async context. Only the authenticated-suggester tier hits this (editor path returns pydantic, anonymous uses a different route) — invisible until DEV ran auth-enabled.

Found and verified during the U7 terminal persona sweep; the fix carries a red→green regression test.

PR: alea-institute/ontokit-api (branch feat/u7-zitadel-standup, base feat/pr-party).

🤖 Generated with Claude Code

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions