Skip to content

⚠️ Rename Kagenti → Rossoctl across kagenti-extensions (→ rossocortex)#678

Merged
mrsabath merged 2 commits into
rossoctl:mainfrom
Ibrahim2595:rename/kagenti-to-rossoctl
Jul 20, 2026
Merged

⚠️ Rename Kagenti → Rossoctl across kagenti-extensions (→ rossocortex)#678
mrsabath merged 2 commits into
rossoctl:mainfrom
Ibrahim2595:rename/kagenti-to-rossoctl

Conversation

@Ibrahim2595

Copy link
Copy Markdown
Contributor

Full content rename Kagenti → Rossoctl. Repo renamed kagenti-extensions → rossocortex; all 1582 case-insensitive kagenti references updated; grep is clean.

Changes:

  • Brand / prose / comments: Kagenti → Rossoctl
  • Go modules (8): github.com/kagenti/kagenti-extensions/... → github.com/rossoctl/rossocortex/... (module dirs + internal replace directives)
  • External dep: github.com/kagenti/context-guru → github.com/rossoctl/context-guru (renamed in lockstep per playbook §3; see caveat below)
  • Cross-repo refs: kagenti-operator → operator, agent-examples → examples, kagenti/kagenti → rossoctl/rossoctl
  • CODEOWNERS @kagenti/* → @rossoctl/*; CI reusable-workflow refs kagenti/.github → rossoctl/.github
  • Python dist/console-script kagenti-sparc-service → rossoctl-sparc-service
  • Env vars KAGENTI_* → ROSSOCTL_*
  • Runtime contracts (this repo's manifests/samples): CRD group agent.kagenti.dev → agent.rossoctl.dev, labels kagenti.io/* → rossoctl.io/*, namespace kagenti-system → rossoctl-system, SPIFFE kagenti.local → rossoctl.local, Keycloak realm kagenti → rossoctl, kagenti-controller-manager → rossoctl-controller-manager

Verification:

  • pytest tests/ (excl e2e): 12 passed (unchanged from baseline)
  • ruff v0.9.10: 4 pre-existing errors, unchanged (none introduced)
  • go build: authbridge-cpex + echo/finance-sparc/ibac demos build clean
  • authlib/abctl/authbridge-envoy/authbridge-proxy fail to build ONLY on github.com/rossoctl/context-guru (repo not yet published) — the expected cross-repo module-path break (playbook §4). Verified via a temporary replace that authlib's own code compiles; resolves once context-guru is renamed + republished and go mod tidy is re-run.

Related to #1972

Assisted-By: Claude Opus 4.8 noreply@anthropic.com

Summary

Related issue(s)

(Optional) Testing Instructions

Fixes #

Full content rename Kagenti → Rossoctl. Repo renamed kagenti-extensions →
rossocortex; all 1582 case-insensitive `kagenti` references updated; grep is clean.

Changes:
- Brand / prose / comments: Kagenti → Rossoctl
- Go modules (8): github.com/kagenti/kagenti-extensions/... →
  github.com/rossoctl/rossocortex/... (module dirs + internal replace directives)
- External dep: github.com/kagenti/context-guru → github.com/rossoctl/context-guru
  (renamed in lockstep per playbook §3; see caveat below)
- Cross-repo refs: kagenti-operator → operator, agent-examples → examples,
  kagenti/kagenti → rossoctl/rossoctl
- CODEOWNERS @kagenti/* → @rossoctl/*; CI reusable-workflow refs
  kagenti/.github → rossoctl/.github
- Python dist/console-script kagenti-sparc-service → rossoctl-sparc-service
- Env vars KAGENTI_* → ROSSOCTL_*
- Runtime contracts (this repo's manifests/samples): CRD group agent.kagenti.dev →
  agent.rossoctl.dev, labels kagenti.io/* → rossoctl.io/*, namespace
  kagenti-system → rossoctl-system, SPIFFE kagenti.local → rossoctl.local,
  Keycloak realm kagenti → rossoctl, kagenti-controller-manager →
  rossoctl-controller-manager

Verification:
- pytest tests/ (excl e2e): 12 passed (unchanged from baseline)
- ruff v0.9.10: 4 pre-existing errors, unchanged (none introduced)
- go build: authbridge-cpex + echo/finance-sparc/ibac demos build clean
- authlib/abctl/authbridge-envoy/authbridge-proxy fail to build ONLY on
  github.com/rossoctl/context-guru (repo not yet published) — the expected
  cross-repo module-path break (playbook §4). Verified via a temporary `replace`
  that authlib's own code compiles; resolves once context-guru is renamed +
  republished and `go mod tidy` is re-run.

Related to #1972

Assisted-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: IBRAHIM IBRAHIM <66755652+Ibrahim2595@users.noreply.github.com>
@coderabbitai

coderabbitai Bot commented Jul 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Too many files!

This PR contains 323 files, which is 223 over the limit of 100.

To get a review, narrow the scope:
• coderabbit review --type committed # exclude uncommitted changes
• coderabbit review --dir # limit to a subdirectory
• coderabbit review --base # compare against a closer base

Upgrade to a paid plan to raise the limit.

Usage-priced reviews support at most 300 files.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b2e8de6c-7a43-4763-aaf8-785bfe8f6b29

📥 Commits

Reviewing files that changed from the base of the PR and between 80fa04a and 2871873.

⛔ Files ignored due to path filters (3)
  • authbridge/authlib/go.sum is excluded by !**/*.sum
  • authbridge/cmd/authbridge-envoy/go.sum is excluded by !**/*.sum
  • authbridge/cmd/authbridge-proxy/go.sum is excluded by !**/*.sum
📒 Files selected for processing (323)
  • .claude/skills/demo.md
  • .claude/skills/orchestrate/SKILL.md
  • .claude/skills/orchestrate:ci/SKILL.md
  • .claude/skills/orchestrate:plan/SKILL.md
  • .claude/skills/orchestrate:precommit/SKILL.md
  • .claude/skills/orchestrate:replicate/SKILL.md
  • .claude/skills/orchestrate:review/SKILL.md
  • .claude/skills/orchestrate:scan/SKILL.md
  • .claude/skills/orchestrate:security/SKILL.md
  • .claude/skills/skills:validate/SKILL.md
  • .claude/skills/skills:write/SKILL.md
  • .github/CODEOWNERS
  • .github/codeql/codeql-config.yml
  • .github/spellcheck/.wordlist.txt
  • .github/workflows/pr-verifier.yml
  • .github/workflows/project.yml
  • .github/workflows/self-assign.yml
  • .github/workflows/stale.yaml
  • .gitignore
  • CLAUDE.md
  • CONTRIBUTING.md
  • LOCAL_TESTING_GUIDE.md
  • Makefile
  • README.md
  • SECURITY.md
  • aiac/docs/specs/ARCHITECTURE-SUMMARY.md
  • aiac/docs/specs/PRD.md
  • aiac/docs/specs/components/aiac-agent/uc1-service-onboarding.md
  • aiac/docs/specs/components/idp-configuration-service.md
  • aiac/docs/specs/components/keycloak-service.md
  • aiac/docs/specs/components/library-idp.md
  • aiac/docs/specs/components/pdp-policy-keycloak-service.md
  • aiac/docs/specs/components/pdp-policy-writer-opa.md
  • aiac/docs/specs/demo/github-agent.md
  • aiac/docs/specs/demo/github-tool.md
  • aiac/docs/specs/integration-test/policy-pipeline.md
  • aiac/docs/specs/integration-test/uc1-onboarding-pipeline.md
  • authbridge/CLAUDE.md
  • authbridge/README.md
  • authbridge/authlib/README.md
  • authbridge/authlib/auth/auth.go
  • authbridge/authlib/auth/auth_test.go
  • authbridge/authlib/auth/result.go
  • authbridge/authlib/config/config.go
  • authbridge/authlib/config/config_test.go
  • authbridge/authlib/go.mod
  • authbridge/authlib/listener/e2e/placeholder_e2e_test.go
  • authbridge/authlib/listener/extauthz/server.go
  • authbridge/authlib/listener/extauthz/server_test.go
  • authbridge/authlib/listener/extproc/mcpreject_test.go
  • authbridge/authlib/listener/extproc/placeholder_test.go
  • authbridge/authlib/listener/extproc/server.go
  • authbridge/authlib/listener/extproc/server_test.go
  • authbridge/authlib/listener/extproc/skiphost_test.go
  • authbridge/authlib/listener/forwardproxy/mcp_sse_repro_test.go
  • authbridge/authlib/listener/forwardproxy/mcp_sse_stream_test.go
  • authbridge/authlib/listener/forwardproxy/server.go
  • authbridge/authlib/listener/forwardproxy/server_test.go
  • authbridge/authlib/listener/forwardproxy/session_pin_test.go
  • authbridge/authlib/listener/forwardproxy/skiphost_test.go
  • authbridge/authlib/listener/forwardproxy/streaming_test.go
  • authbridge/authlib/listener/forwardproxy/tlsbridge_integration_test.go
  • authbridge/authlib/listener/forwardproxy/transparent.go
  • authbridge/authlib/listener/forwardproxy/transparent_test.go
  • authbridge/authlib/listener/httpx/render.go
  • authbridge/authlib/listener/httpx/render_test.go
  • authbridge/authlib/listener/internal/tlssniff/listener_test.go
  • authbridge/authlib/listener/reverseproxy/finisher_test.go
  • authbridge/authlib/listener/reverseproxy/placeholder_test.go
  • authbridge/authlib/listener/reverseproxy/recording_test.go
  • authbridge/authlib/listener/reverseproxy/server.go
  • authbridge/authlib/listener/reverseproxy/server_test.go
  • authbridge/authlib/listener/reverseproxy/streaming_test.go
  • authbridge/authlib/listener/skiphost/skiphost.go
  • authbridge/authlib/listener/skiphost/skiphost_test.go
  • authbridge/authlib/listener/transparentproxy/origdst_linux.go
  • authbridge/authlib/llmclient/README.md
  • authbridge/authlib/llmclient/client_test.go
  • authbridge/authlib/observe/statserver.go
  • authbridge/authlib/observe/statserver_test.go
  • authbridge/authlib/pipeline/action_test.go
  • authbridge/authlib/pipeline/content.go
  • authbridge/authlib/pipeline/content_test.go
  • authbridge/authlib/pipeline/context.go
  • authbridge/authlib/pipeline/schema.go
  • authbridge/authlib/pipeline/session_test.go
  • authbridge/authlib/pipeline/sharedstore_test.go
  • authbridge/authlib/pipeline/snapshot_test.go
  • authbridge/authlib/plugins/a2aparser/plugin.go
  • authbridge/authlib/plugins/a2aparser/plugin_test.go
  • authbridge/authlib/plugins/a2aparser/streaming_test.go
  • authbridge/authlib/plugins/contextguru/build_test.go
  • authbridge/authlib/plugins/contextguru/plugin.go
  • authbridge/authlib/plugins/contextguru/plugin_test.go
  • authbridge/authlib/plugins/cpex/README.md
  • authbridge/authlib/plugins/cpex/cmf_a2a.go
  • authbridge/authlib/plugins/cpex/cmf_a2a_test.go
  • authbridge/authlib/plugins/cpex/cmf_body.go
  • authbridge/authlib/plugins/cpex/cmf_body_test.go
  • authbridge/authlib/plugins/cpex/cmf_inference.go
  • authbridge/authlib/plugins/cpex/cmf_inference_test.go
  • authbridge/authlib/plugins/cpex/config.go
  • authbridge/authlib/plugins/cpex/manager.go
  • authbridge/authlib/plugins/cpex/manager_cpex.go
  • authbridge/authlib/plugins/cpex/manager_test.go
  • authbridge/authlib/plugins/cpex/plugin.go
  • authbridge/authlib/plugins/cpex/plugin_test.go
  • authbridge/authlib/plugins/ibac/judge.go
  • authbridge/authlib/plugins/ibac/judge_test.go
  • authbridge/authlib/plugins/ibac/plugin.go
  • authbridge/authlib/plugins/ibac/plugin_test.go
  • authbridge/authlib/plugins/inferenceparser/anthropic.go
  • authbridge/authlib/plugins/inferenceparser/anthropic_test.go
  • authbridge/authlib/plugins/inferenceparser/plugin.go
  • authbridge/authlib/plugins/inferenceparser/plugin_test.go
  • authbridge/authlib/plugins/inferenceparser/streaming_test.go
  • authbridge/authlib/plugins/jwtvalidation/e2e_audiences_test.go
  • authbridge/authlib/plugins/jwtvalidation/identity.go
  • authbridge/authlib/plugins/jwtvalidation/identity_test.go
  • authbridge/authlib/plugins/jwtvalidation/placeholder_test.go
  • authbridge/authlib/plugins/jwtvalidation/plugin.go
  • authbridge/authlib/plugins/jwtvalidation/plugin_test.go
  • authbridge/authlib/plugins/litellm_budgettrack/plugin.go
  • authbridge/authlib/plugins/mcpparser/plugin.go
  • authbridge/authlib/plugins/mcpparser/plugin_test.go
  • authbridge/authlib/plugins/mcpparser/streaming_test.go
  • authbridge/authlib/plugins/opa/README.md
  • authbridge/authlib/plugins/opa/plugin.go
  • authbridge/authlib/plugins/opa/plugin_test.go
  • authbridge/authlib/plugins/plugins_test.go
  • authbridge/authlib/plugins/plugintesting/plugintesting.go
  • authbridge/authlib/plugins/registry.go
  • authbridge/authlib/plugins/registry_test.go
  • authbridge/authlib/plugins/sparc/collect.go
  • authbridge/authlib/plugins/sparc/plugin.go
  • authbridge/authlib/plugins/sparc/plugin_test.go
  • authbridge/authlib/plugins/sparc/respond.go
  • authbridge/authlib/plugins/staticinject/plugin.go
  • authbridge/authlib/plugins/staticinject/plugin_test.go
  • authbridge/authlib/plugins/staticinject/resolver.go
  • authbridge/authlib/plugins/stats.go
  • authbridge/authlib/plugins/tokenbroker/plugin.go
  • authbridge/authlib/plugins/tokenbroker/plugin_edge_test.go
  • authbridge/authlib/plugins/tokenbroker/plugin_request_test.go
  • authbridge/authlib/plugins/tokenbroker/plugin_routing_test.go
  • authbridge/authlib/plugins/tokenexchange/delegation_test.go
  • authbridge/authlib/plugins/tokenexchange/placeholder_test.go
  • authbridge/authlib/plugins/tokenexchange/plugin.go
  • authbridge/authlib/plugins/tokenexchange/plugin_test.go
  • authbridge/authlib/plugins/tokenexchange/provider.go
  • authbridge/authlib/plugins/tokenexchange/provider_keycloak.go
  • authbridge/authlib/reloader/reloader.go
  • authbridge/authlib/reloader/reloader_test.go
  • authbridge/authlib/session/intent_pin_test.go
  • authbridge/authlib/session/store.go
  • authbridge/authlib/session/store_test.go
  • authbridge/authlib/sessionapi/catalog_adapter.go
  • authbridge/authlib/sessionapi/server.go
  • authbridge/authlib/sessionapi/server_test.go
  • authbridge/authlib/tls/client.go
  • authbridge/authlib/tls/server.go
  • authbridge/authlib/tls/server_test.go
  • authbridge/cmd/README.md
  • authbridge/cmd/abctl/README.md
  • authbridge/cmd/abctl/apiclient/client.go
  • authbridge/cmd/abctl/apiclient/client_test.go
  • authbridge/cmd/abctl/apiclient/sse.go
  • authbridge/cmd/abctl/edit/configmap.go
  • authbridge/cmd/abctl/edit/configmap_test.go
  • authbridge/cmd/abctl/edit/edit.go
  • authbridge/cmd/abctl/edit/templates.go
  • authbridge/cmd/abctl/edit/templates_test.go
  • authbridge/cmd/abctl/edit/validate.go
  • authbridge/cmd/abctl/edit/validate_test.go
  • authbridge/cmd/abctl/go.mod
  • authbridge/cmd/abctl/main.go
  • authbridge/cmd/abctl/tui/app.go
  • authbridge/cmd/abctl/tui/catalog_pane.go
  • authbridge/cmd/abctl/tui/catalog_pane_test.go
  • authbridge/cmd/abctl/tui/deps.go
  • authbridge/cmd/abctl/tui/deps_test.go
  • authbridge/cmd/abctl/tui/detail_pane.go
  • authbridge/cmd/abctl/tui/detail_pane_test.go
  • authbridge/cmd/abctl/tui/e2e_test.go
  • authbridge/cmd/abctl/tui/edit_e2e_test.go
  • authbridge/cmd/abctl/tui/edit_overlay.go
  • authbridge/cmd/abctl/tui/events_pane.go
  • authbridge/cmd/abctl/tui/events_pane_test.go
  • authbridge/cmd/abctl/tui/keys.go
  • authbridge/cmd/abctl/tui/namespaces_pane.go
  • authbridge/cmd/abctl/tui/picker_test.go
  • authbridge/cmd/abctl/tui/pipeline_pane.go
  • authbridge/cmd/abctl/tui/pipeline_pane_test.go
  • authbridge/cmd/abctl/tui/plugin_detail_pane.go
  • authbridge/cmd/abctl/tui/plugin_detail_pane_test.go
  • authbridge/cmd/abctl/tui/pods_pane.go
  • authbridge/cmd/abctl/tui/sessions_pane.go
  • authbridge/cmd/authbridge-cpex/go.mod
  • authbridge/cmd/authbridge-cpex/main.go
  • authbridge/cmd/authbridge-envoy/Dockerfile
  • authbridge/cmd/authbridge-envoy/go.mod
  • authbridge/cmd/authbridge-envoy/main.go
  • authbridge/cmd/authbridge-envoy/plugins_contextguru.go
  • authbridge/cmd/authbridge-envoy/plugins_ibac.go
  • authbridge/cmd/authbridge-proxy/Dockerfile
  • authbridge/cmd/authbridge-proxy/go.mod
  • authbridge/cmd/authbridge-proxy/main.go
  • authbridge/cmd/authbridge-proxy/main_test.go
  • authbridge/cmd/authbridge-proxy/plugins_a2aparser.go
  • authbridge/cmd/authbridge-proxy/plugins_contextguru.go
  • authbridge/cmd/authbridge-proxy/plugins_ibac.go
  • authbridge/cmd/authbridge-proxy/plugins_inferenceparser.go
  • authbridge/cmd/authbridge-proxy/plugins_jwtvalidation.go
  • authbridge/cmd/authbridge-proxy/plugins_litellm_budgettrack.go
  • authbridge/cmd/authbridge-proxy/plugins_mcpparser.go
  • authbridge/cmd/authbridge-proxy/plugins_opa.go
  • authbridge/cmd/authbridge-proxy/plugins_sparc.go
  • authbridge/cmd/authbridge-proxy/plugins_staticinject.go
  • authbridge/cmd/authbridge-proxy/plugins_tokenbroker.go
  • authbridge/cmd/authbridge-proxy/plugins_tokenexchange.go
  • authbridge/demos/README.md
  • authbridge/demos/context-guru/README.md
  • authbridge/demos/context-guru/k8s/agent.yaml
  • authbridge/demos/context-guru/run.sh
  • authbridge/demos/echo/Makefile
  • authbridge/demos/echo/README.md
  • authbridge/demos/echo/agent/main.go
  • authbridge/demos/echo/go.mod
  • authbridge/demos/echo/k8s/agent.yaml
  • authbridge/demos/echo/k8s/upstream.yaml
  • authbridge/demos/echo/scripts/patch-echo-config.sh
  • authbridge/demos/echo/scripts/setup_keycloak.py
  • authbridge/demos/finance-sparc/Makefile
  • authbridge/demos/finance-sparc/README.md
  • authbridge/demos/finance-sparc/finance-agent/main.go
  • authbridge/demos/finance-sparc/finance-mcp/main.go
  • authbridge/demos/finance-sparc/go.mod
  • authbridge/demos/finance-sparc/k8s/agent.yaml
  • authbridge/demos/finance-sparc/k8s/ollama.yaml
  • authbridge/demos/finance-sparc/k8s/sparc-patch.yaml
  • authbridge/demos/finance-sparc/scripts/drive-demo.sh
  • authbridge/demos/finance-sparc/scripts/host-setup.sh
  • authbridge/demos/finance-sparc/scripts/patch-sparc-config.sh
  • authbridge/demos/finance-sparc/scripts/setup_keycloak_finance.py
  • authbridge/demos/finance-sparc/scripts/stage-ollama-model.sh
  • authbridge/demos/github-issue/aiac/Makefile
  • authbridge/demos/github-issue/aiac/aiac.env.TEMPLATE
  • authbridge/demos/github-issue/aiac/aiac_agent/utils/validators.py
  • authbridge/demos/github-issue/aiac/scripts/show-result.py
  • authbridge/demos/github-issue/demo-aiac.md
  • authbridge/demos/github-issue/demo-manual.md
  • authbridge/demos/github-issue/demo-rbac.md
  • authbridge/demos/github-issue/demo-ui.md
  • authbridge/demos/github-issue/demo.md
  • authbridge/demos/github-issue/k8s/configmaps.yaml
  • authbridge/demos/github-issue/k8s/git-issue-agent-deployment.yaml
  • authbridge/demos/github-issue/k8s/github-tool-deployment.yaml
  • authbridge/demos/github-issue/rbac/Makefile
  • authbridge/demos/github-issue/rbac/config.yaml
  • authbridge/demos/github-issue/rbac/policy.yaml
  • authbridge/demos/github-issue/setup_keycloak.py
  • authbridge/demos/hr-cpex/Makefile
  • authbridge/demos/hr-cpex/README.md
  • authbridge/demos/hr-cpex/agent/Dockerfile
  • authbridge/demos/hr-cpex/k8s/00-namespace.yaml
  • authbridge/demos/hr-cpex/k8s/20-hr-mcp.yaml
  • authbridge/demos/ibac/Makefile
  • authbridge/demos/ibac/README.md
  • authbridge/demos/ibac/agent/main.go
  • authbridge/demos/ibac/go.mod
  • authbridge/demos/ibac/k8s/agent.yaml
  • authbridge/demos/ibac/k8s/email-server.yaml
  • authbridge/demos/ibac/scripts/patch-ibac-config.sh
  • authbridge/demos/mcp-parser/README.md
  • authbridge/demos/mtls/Makefile
  • authbridge/demos/mtls/README.md
  • authbridge/demos/mtls/k8s/callee-envoy.yaml
  • authbridge/demos/mtls/k8s/callee.yaml
  • authbridge/demos/mtls/k8s/caller-envoy.yaml
  • authbridge/demos/mtls/k8s/caller.yaml
  • authbridge/demos/mtls/k8s/envoy-config-mtls.yaml
  • authbridge/demos/mtls/scripts/patch-mtls-config.sh
  • authbridge/demos/weather-agent/demo-ui-advanced.md
  • authbridge/demos/weather-agent/demo-ui.md
  • authbridge/demos/weather-agent/demo-with-abctl.md
  • authbridge/demos/weather-agent/deploy_and_verify_advanced.sh
  • authbridge/demos/weather-agent/k8s/agentruntime-weather-service-advanced.yaml
  • authbridge/demos/weather-agent/k8s/agentruntime-weather-tool-advanced.yaml
  • authbridge/demos/weather-agent/k8s/configmaps-advanced.yaml
  • authbridge/demos/weather-agent/k8s/weather-service-advanced.yaml
  • authbridge/demos/weather-agent/k8s/weather-tool-advanced.yaml
  • authbridge/demos/weather-agent/setup_keycloak_weather_advanced.py
  • authbridge/docs/framework-architecture.md
  • authbridge/docs/idp-plugin-contract.md
  • authbridge/docs/litellm-budgettrack-plugin.md
  • authbridge/docs/plugin-reference.md
  • authbridge/docs/plugin-tutorial.md
  • authbridge/docs/sparc-plugin.md
  • authbridge/docs/superpowers/plans/2026-05-22-authbridge-go-spiffe-sdk.md
  • authbridge/docs/superpowers/plans/2026-05-28-abctl-pipeline-edit.md
  • authbridge/docs/superpowers/plans/2026-05-28-abctl-plugin-config.md
  • authbridge/docs/superpowers/plans/2026-05-28-abctl-pod-picker.md
  • authbridge/docs/superpowers/plans/2026-06-02-credential-placeholder-swap.md
  • authbridge/docs/superpowers/plans/2026-06-17-authbridge-tlsbridge-phase1.md
  • authbridge/docs/superpowers/specs/2026-05-22-authbridge-go-spiffe-sdk-design.md
  • authbridge/docs/superpowers/specs/2026-06-12-authbridge-tlsbridge-design.md
  • authbridge/keycloak_sync.py
  • authbridge/proxy-init/Makefile
  • authbridge/proxy-init/README.md
  • authbridge/sparc-service/Dockerfile
  • authbridge/sparc-service/README.md
  • authbridge/sparc-service/deploy/Makefile
  • authbridge/sparc-service/deploy/README.md
  • authbridge/sparc-service/deploy/sparc-service.yaml
  • authbridge/sparc-service/pyproject.toml
  • authbridge/sparc-service/sparc_service/__init__.py
  • authbridge/sparc-service/sparc_service/api.py
  • authbridge/sparc-service/sparc_service/settings.py
  • docs/README.md
  • docs/proposals/authbridge-hooks.md
  • local-build-and-test.sh
  • tests/conftest.py
  • verify-spire-keycloak.sh

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@mrsabath mrsabath left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

The rename itself is faithful and consistent — the 8 Go modules move to github.com/rossoctl/rossocortex/... with replace directives updated in lockstep, and the manifest/CRD-group (agent.rossoctl.dev)/label (rossoctl.io/*)/namespace substitutions I spot-checked are clean. Sign-off/DCO ✅.

Requesting changes on one supply-chain correctness issue (go.sum). The single failing CI check is the expected cross-repo sequencing break, explained below.

Blocking

  • go.sum checksums for context-guru are non-validating placeholders (inline). The dep was rewritten github.com/kagenti/context-gurugithub.laiyagushi.com/rossoctl/context-guru, but the h1: and /go.mod h1: hashes were kept byte-identical (same in authlib, authbridge-envoy, authbridge-proxy go.sum). Go's /go.mod hash is computed over the go.mod contents, whose module line must become github.com/rossoctl/context-guru on republish — so the recorded hash cannot match. Once rossoctl/context-guru is published, go mod verify / build fails with a checksum mismatch for every consumer. Regenerate via go mod tidy after the dep is republished; don't hand-edit the hashes.

Non-blocking (transition sequencing)

  • Go CI (authlib) fails: github.com/rossoctl/context-guru is unresolvable — the repo doesn't exist yet (404; the rossoctl org exists, the repo doesn't), so git ls-remote prompts for auth and the build aborts. The rewrite is correct; this is the documented cross-repo break and resolves once context-guru moves under the rossoctl org. One thing to confirm: the pseudo-version v0.0.0-20260713113308-b624f2c3d8c2 pins commit b624f2c3d8c2 — verify that commit still exists (and resolves to the same tree) in the renamed repo after the org move, otherwise the pseudo-version itself will need regenerating too.

Nit

  • Title is 79 chars (guideline <72) with a bare ⚠️ prefix; the org title Ruleset expects an allowed word prefix (e.g. Refactor:). Currently green but may trip on a future re-run. Consider Refactor: Rename Kagenti → Rossoctl across kagenti-extensions (→ rossocortex).

Areas reviewed: Go modules (go.mod/go.sum ×11), CI (failure traced end-to-end), K8s manifests/samples, Python packaging, supply-chain (external dep rename), commit conventions.
CI status: 1 failing (transition sequencing), rest passing; CodeRabbit skipped (323 files > 100-file limit).

Comment thread authbridge/authlib/go.sum Outdated
github.com/kagenti/context-guru v0.0.0-20260713113308-b624f2c3d8c2 h1:nyu0kAd/+NlRM95IxEiRws2QyRtyyYRy8u8wjnwxn4o=
github.com/kagenti/context-guru v0.0.0-20260713113308-b624f2c3d8c2/go.mod h1:arqPc8H+3s+XjplrD0ytgv1Zum241jvuGu3139DX6p8=
github.com/rossoctl/context-guru v0.0.0-20260713113308-b624f2c3d8c2 h1:nyu0kAd/+NlRM95IxEiRws2QyRtyyYRy8u8wjnwxn4o=
github.com/rossoctl/context-guru v0.0.0-20260713113308-b624f2c3d8c2/go.mod h1:arqPc8H+3s+XjplrD0ytgv1Zum241jvuGu3139DX6p8=

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

must-fix — these checksums won't validate.

The module path was rewritten kagenti/context-gururossoctl/context-guru, but both hashes were kept byte-identical:

github.com/rossoctl/context-guru v0.0.0-20260713113308-b624f2c3d8c2 h1:nyu0kAd/+NlRM95IxEiRws2QyRtyyYRy8u8wjnwxn4o=
github.com/rossoctl/context-guru v0.0.0-20260713113308-b624f2c3d8c2/go.mod h1:arqPc8H+3s+XjplrD0ytgv1Zum241jvuGu3139DX6p8=

The /go.mod h1: line hashes the go.mod file contents. When context-guru is republished under the rossoctl org, its go.mod module directive must become module github.com/rossoctl/context-guru (Go requires the module path to match the import path) — different bytes, so the /go.mod hash necessarily changes. The recorded value here is the hash of the old kagenti/context-guru go.mod, so once the renamed dep exists, go mod verify / any build fails with:

verifying github.com/rossoctl/context-guru@...: checksum mismatch
SECURITY ERROR

These are placeholder lines from the string-replace, not a correct final state. Fix: after rossoctl/context-guru is published, run go mod tidy in each affected module (authlib, authbridge-envoy, authbridge-proxy) to regenerate real checksums — don't hand-edit the h1: values. Same applies to the sibling go.sum files with the identical two-line block.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in 2871873. You're right — these were non-validating placeholders: the string-replace kept the old kagenti/context-guru hashes, and the /go.mod hash necessarily changes once the module line becomes module github.com/rossoctl/context-guru on republish.

Since a valid checksum for a not-yet-published module can't exist, I removed the placeholder lines from all three go.sum (authlib, authbridge-envoy, authbridge-proxy) rather than record known-wrong hashes — so there's no false checksum left to trip a SECURITY ERROR later. go mod tidy regenerates real ones once rossoctl/context-guru is published. Confirmed the removal doesn't regress the currently-green modules (cpex + demos still build); authlib/envoy/proxy stay red only on the unpublished dep.

On your pseudo-version question: commit b624f2c3d8c2 exists in context-guru (dated 2026-07-13T11:33:08Z, matching v0.0.0-20260713113308-…), so it survives the org move and the version string stays resolvable — only the /go.mod hash changes, which go mod tidy handles.

The context-guru dependency was renamed github.com/kagenti/context-guru →
github.com/rossoctl/context-guru, but the go.sum `h1:` and `/go.mod h1:` hashes
were carried over byte-identical by the string replace. Go's `/go.mod` hash is
computed over the go.mod contents, whose `module` line must become
github.com/rossoctl/context-guru on republish — so the recorded hashes can never
match and would trigger a `go mod verify` checksum-mismatch SECURITY ERROR for
every consumer once the renamed dep is published.

You can't produce a valid checksum for a module that doesn't exist yet, so
rather than record known-wrong hashes, remove the placeholder lines from
authlib, authbridge-envoy, and authbridge-proxy go.sum. `go mod tidy` regenerates
real checksums once rossoctl/context-guru is published. The go.mod `require`
(pseudo-version v0.0.0-20260713113308-b624f2c3d8c2, commit b624f2c3d8c2 —
confirmed present in the repo) is unchanged; the build stays red on the
unpublished dep (documented cross-repo sequencing) until the org move.

Addresses review feedback on rossoctl#678.

Related to #1972

Assisted-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: IBRAHIM IBRAHIM <66755652+Ibrahim2595@users.noreply.github.com>
@Ibrahim2595

Copy link
Copy Markdown
Contributor Author

Thanks @mrsabath — great catch on the supply-chain correctness.

Blocking — fixed (2871873): removed the non-validating context-guru go.sum placeholders across authlib / authbridge-envoy / authbridge-proxy. You can't produce a valid checksum for an unpublished module, so rather than keep known-wrong hashes (which would SECURITY ERROR on republish), the lines are removed and go mod tidy regenerates them once rossoctl/context-guru is published. No regression to the green modules (cpex + demos still build). Details in the inline thread.

Non-blocking — confirmed: Go CI (authlib) stays red on the unresolvable github.com/rossoctl/context-guru (404 until the repo moves under rossoctl) — the documented cross-repo break. Re the pseudo-version: commit b624f2c3d8c2 exists in context-guru (2026-07-13T11:33:08Z), so it persists through the org move and v0.0.0-20260713113308-b624f2c3d8c2 stays valid; only the /go.mod hash regenerates.

Also: applied the identical fix proactively to the operator's token-broker go.sum in #485 (same placeholder issue for github.com/rossoctl/rossocortex/authbridge/authlib), so it won't hit the same trap.

Title nit: same as on #2230 — happy to switch to a word prefix; which form passes both the emoji pr-verifier (currently green) and the title Ruleset? I'll apply it across all four rename PRs.

@mrsabath

Copy link
Copy Markdown
Contributor

Blocked on Phase 0/1 of the rename rollout ordering (see rossoctl/rossoctl#1972). This PR unblocks once rossoctl/context-guru is published — then go mod tidy in authlib / authbridge-envoy / authbridge-proxy regenerates real go.sum checksums (the current string-replaced hashes will fail go mod verify once the dep exists).

@mrsabath
mrsabath merged commit dadd52f into rossoctl:main Jul 20, 2026
17 of 18 checks passed
@github-project-automation github-project-automation Bot moved this from New/ToDo to Done in Rossoctl Issue Prioritization Jul 20, 2026
mrsabath pushed a commit that referenced this pull request Jul 20, 2026
…ortex

Follow-up to the Rossoctl rename (#678 merged the kagenti→rossoctl content but not
the later rossocortex→cortex change). The repo is now rossoctl/cortex, yet its 8
Go modules still declared github.com/rossoctl/rossocortex/... — a module-path
mismatch that breaks `go get`/imports of github.com/rossoctl/cortex/... . Sweeps
all rossocortex → cortex:

- Go modules (8): github.com/rossoctl/rossocortex/... → github.com/rossoctl/cortex/...
  (+ internal replace directives)
- Images: ghcr.io/rossoctl/rossocortex/* → ghcr.io/rossoctl/cortex/*
- Brand/prose: RossoCortex/Rossocortex → Cortex

Verification: grep clean of rossocortex and kagenti; authbridge-cpex + demos build.
authlib/authbridge-envoy/authbridge-proxy still depend on github.com/rossoctl/
context-guru, which is org-moved but not yet module-path-renamed (its go.mod still
declares github.com/kagenti/context-guru) — so `go mod tidy` there is blocked until
context-guru itself is renamed + republished; real go.sum checksums regenerate then.

Related to #1972

Assisted-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: IBRAHIM IBRAHIM <66755652+Ibrahim2595@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants