chore: add display names and descriptions to IAM roles

.claude/settings.local.json

@@ -1,19 +1,19 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(golangci-lint run:*)",
-      "Bash(git checkout:*)",
-      "Bash(go build:*)",
-      "Bash(go test:*)",
-      "Bash(npm run build:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "Bash(git push:*)",
-      "Bash(task generate:*)",
-      "Bash(grep:*)",
-      "Bash(gh pr checks:*)",
-      "Bash(gh api:*)",
-      "Bash(git cherry-pick:*)"
-    ]
-  }
-}
+{
+  "permissions": {
+    "allow": [
+      "Bash(golangci-lint run:*)",
+      "Bash(git checkout:*)",
+      "Bash(go build:*)",
+      "Bash(go test:*)",
+      "Bash(npm run build:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git push:*)",
+      "Bash(task generate:*)",
+      "Bash(grep:*)",
+      "Bash(gh pr checks:*)",
+      "Bash(gh api:*)",
+      "Bash(git cherry-pick:*)"
+    ]
+  }
+}

.github/workflows/build-apiserver.yaml

@@ -1,77 +1,77 @@
-name: Build and Publish Docker Image
-
-on:
-  push:
-  release:
-    types: ["published"]
-
-jobs:
-  validate-kustomize:
-    uses: datum-cloud/actions/.github/workflows/validate-kustomize.yaml@v1.9.0
-
-  publish-container-image:
-    # No point in trying to build the container image if the deployment
-    # manifests are invalid.
-    needs:
-      - validate-kustomize
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-      attestations: write
-    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.9.0
-    with:
-      image-name: activity
-    secrets: inherit
-
-  publish-ui-container-image:
-    # Build and publish the Activity UI container image
-    needs:
-      - validate-kustomize
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-      attestations: write
-    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.9.0
-    with:
-      image-name: activity-ui
-      context: ui
-      dockerfile-path: ui/Dockerfile
-    secrets: inherit
-
-  publish-kustomize-bundles:
-    # Ensure the kustomize manifests are valid and the container is published
-    # before we publish the kustomize manifests. We expect publishing the
-    # kustomize manifests to result in new deployments going out.
-    needs:
-      - validate-kustomize
-      - publish-container-image
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.9.0
-    with:
-      bundle-name: ghcr.io/datum-cloud/activity-kustomize
-      bundle-path: config
-      image-overlays: config/base
-      image-name: ghcr.io/datum-cloud/activity
-    secrets: inherit
-
-  publish-ui-kustomize-bundle:
-    # Publish the UI kustomize bundle separately
-    needs:
-      - validate-kustomize
-      - publish-ui-container-image
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.9.0
-    with:
-      bundle-name: ghcr.io/datum-cloud/activity-ui-kustomize
-      bundle-path: config/components/ui
-      image-overlays: config/components/ui
-      image-name: ghcr.io/datum-cloud/activity-ui
-    secrets: inherit
+name: Build and Publish Docker Image
+
+on:
+  push:
+  release:
+    types: ["published"]
+
+jobs:
+  validate-kustomize:
+    uses: datum-cloud/actions/.github/workflows/validate-kustomize.yaml@v1.9.0
+
+  publish-container-image:
+    # No point in trying to build the container image if the deployment
+    # manifests are invalid.
+    needs:
+      - validate-kustomize
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+      attestations: write
+    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.9.0
+    with:
+      image-name: activity
+    secrets: inherit
+
+  publish-ui-container-image:
+    # Build and publish the Activity UI container image
+    needs:
+      - validate-kustomize
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+      attestations: write
+    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.9.0
+    with:
+      image-name: activity-ui
+      context: ui
+      dockerfile-path: ui/Dockerfile
+    secrets: inherit
+
+  publish-kustomize-bundles:
+    # Ensure the kustomize manifests are valid and the container is published
+    # before we publish the kustomize manifests. We expect publishing the
+    # kustomize manifests to result in new deployments going out.
+    needs:
+      - validate-kustomize
+      - publish-container-image
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.9.0
+    with:
+      bundle-name: ghcr.io/datum-cloud/activity-kustomize
+      bundle-path: config
+      image-overlays: config/base
+      image-name: ghcr.io/datum-cloud/activity
+    secrets: inherit
+
+  publish-ui-kustomize-bundle:
+    # Publish the UI kustomize bundle separately
+    needs:
+      - validate-kustomize
+      - publish-ui-container-image
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.9.0
+    with:
+      bundle-name: ghcr.io/datum-cloud/activity-ui-kustomize
+      bundle-path: config/components/ui
+      image-overlays: config/components/ui
+      image-name: ghcr.io/datum-cloud/activity-ui
+    secrets: inherit

.github/workflows/publish-ui-npm.yaml

@@ -1,14 +1,14 @@
-name: Publish UI to NPM
-
-on:
-  push:
-    branches:
-      - main
-
-jobs:
-  publish:
-    uses: datum-cloud/actions/.github/workflows/publish-npm-package.yaml@v1.11.0
-    with:
-      package-name: "@datum-cloud/activity-ui"
-      package-path: ui
-    secrets: inherit
+name: Publish UI to NPM
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  publish:
+    uses: datum-cloud/actions/.github/workflows/publish-npm-package.yaml@v1.11.0
+    with:
+      package-name: "@datum-cloud/activity-ui"
+      package-path: ui
+    secrets: inherit

.github/workflows/testing.yaml

@@ -1,14 +1,14 @@
-name: "Execute Golang Tests"
-on:
-  push:
-
-jobs:
-  execute-tests:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-      - name: Install dependencies
-        run: go mod download
-      - name: Execute golang tests
-        run: go test -timeout 5m ./...
+name: "Execute Golang Tests"
+on:
+  push:
+
+jobs:
+  execute-tests:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+      - name: Install dependencies
+        run: go mod download
+      - name: Execute golang tests
+        run: go test -timeout 5m ./...

.gitignore

@@ -1,70 +1,70 @@
-# Binaries for programs and plugins
-*.exe
-*.exe~
-*.dll
-*.so
-*.dylib
-bin/
-dist/
-
-# Test binary, built with `go test -c`
-*.test
-
-# Output of the go coverage tool
-*.out
-coverage.txt
-coverage.html
-
-# Go workspace file
-go.work
-
-# Dependency directories
-vendor/
-
-# IDE specific files
-.idea/
-.vscode/
-*.swp
-*.swo
-*~
-
-# OS specific files
-.DS_Store
-Thumbs.db
-
-# Build outputs
-./activity
-
-# Kubernetes secrets
-*.key
-*.crt
-*.pem
-
-# Temporary files
-tmp/
-temp/
-
-# Local environment files
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+bin/
+dist/
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool
+*.out
+coverage.txt
+coverage.html
+
+# Go workspace file
+go.work
+
+# Dependency directories
+vendor/
+
+# IDE specific files
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# OS specific files
+.DS_Store
+Thumbs.db
+
+# Build outputs
+./activity
+
+# Kubernetes secrets
+*.key
+*.crt
+*.pem
+
+# Temporary files
+tmp/
+temp/
+
+# Local environment files
+
+# ClickHouse data
+clickhouse-data/
+
+# Dashboard build outputs
+dashboards/vendor/
+dashboards/jsonnetfile.lock.json
+observability/vendor/
+observability/jsonnetfile.lock.json
+
+# Directory used for the test-infra repo to manage the test-infra environment.
+.test-infra
+
+# Directory used by the taskfile for remote taskfile storage
+.task
+.infra
+
+# Node.js
+node_modules/
+.pnpm-store/
+.claude/settings.local.json
 .env
 .env.local
-
-# ClickHouse data
-clickhouse-data/
-
-# Dashboard build outputs
-dashboards/vendor/
-dashboards/jsonnetfile.lock.json
-observability/vendor/
-observability/jsonnetfile.lock.json
-
-# Directory used for the test-infra repo to manage the test-infra environment.
-.test-infra
-
-# Directory used by the taskfile for remote taskfile storage
-.task
-.infra
-
-# Node.js
-node_modules/
-.pnpm-store/
-.claude/settings.local.json