fix: prevent token refresh storm in CheckAccess v2 and add rollout observability#449

Merged

kodiakhq[bot] merged 21 commits into

kubeguard:masterfrom

arxhive:fix/checkaccess-v2-token-scope-and-observability

May 19, 2026

Commits on May 19, 2026

fix: prevent token refresh storm in CheckAccess v2 and add rollout observability
Artem Kolomeetc
committed
fix: revert batch-level logs to V(5)/V(7) to avoid log volume at scale
Artem Kolomeetc
committed
fix: address PR review feedback
Artem Kolomeetc
committed
feat: add checkaccess v2 mock PDP service and staging test scripts
Artem Kolomeetc
committed
refactor: consolidate staging tests into tests/ directory
Artem Kolomeetc
committed
docs: add CLAUDE.md and staging test command
Artem Kolomeetc
committed
docs: scrub AKS internals from CLAUDE.md
Artem Kolomeetc
committed
fix: correct OBO terminology in mock server comment
Artem Kolomeetc
committed
fix: request PDP-audience tokens from OBO for CheckAccess v2
Artem Kolomeetc
committed
fix: mock OBO handler parses resource field from request
Artem Kolomeetc
committed
docs: scrub AKS internals from staging test command
Artem Kolomeetc
committed
docs: remove subscription name from staging test command
Artem Kolomeetc
committed
docs: remove prerequisites section from staging test command
Artem Kolomeetc
committed
docs: obfuscate personal identifiers in staging test command
Artem Kolomeetc
committed
test: add token-proxy for real PDP testing and checkaccess v2 alert
Artem Kolomeetc
committed
docs: update staging test guide with real PDP testing and fixes
Artem Kolomeetc
committed
chore: remove checkaccess-v2-alert from this branch
Artem Kolomeetc
committed
fix: add Apache 2.0 license headers to test files
Artem Kolomeetc
committed
fix: add blank line after shebang in shell scripts for license checker
Artem Kolomeetc
committed
fix: resolve errcheck lint issues in token-proxy
Artem Kolomeetc
committed
docs: add pre-commit verification steps to CLAUDE.md
Artem Kolomeetc
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: prevent token refresh storm in CheckAccess v2 and add rollout observability#449

fix: prevent token refresh storm in CheckAccess v2 and add rollout observability#449
kodiakhq[bot] merged 21 commits into
kubeguard:masterfrom
arxhive:fix/checkaccess-v2-token-scope-and-observability

Commits on May 19, 2026

fix: prevent token refresh storm in CheckAccess v2 and add rollout observability

fix: revert batch-level logs to V(5)/V(7) to avoid log volume at scale

fix: address PR review feedback

feat: add checkaccess v2 mock PDP service and staging test scripts

refactor: consolidate staging tests into tests/ directory

docs: add CLAUDE.md and staging test command

docs: scrub AKS internals from CLAUDE.md

fix: correct OBO terminology in mock server comment

fix: request PDP-audience tokens from OBO for CheckAccess v2

fix: mock OBO handler parses resource field from request

docs: scrub AKS internals from staging test command

docs: remove subscription name from staging test command

docs: remove prerequisites section from staging test command

docs: obfuscate personal identifiers in staging test command

test: add token-proxy for real PDP testing and checkaccess v2 alert

docs: update staging test guide with real PDP testing and fixes

chore: remove checkaccess-v2-alert from this branch

fix: add Apache 2.0 license headers to test files

fix: add blank line after shebang in shell scripts for license checker

fix: resolve errcheck lint issues in token-proxy

docs: add pre-commit verification steps to CLAUDE.md