Strip email local-part from cassette guard failure → Wire 13 access-review connectors in Helm chart

- Strip email local-part from cassette guard failure
- Drop dead src/components/connectors vite include
- Cover all 13 access-review providers in builder test
- Wire 13 access-review connectors in Helm chart

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
This commit is contained in:
Aurélien Sibiril
2026-05-17 17:22:48 +02:00
parent 8f6ecd9f81
commit 7504099507
5 changed files with 61 additions and 20 deletions

View File

@@ -96,14 +96,19 @@ func TestCassettesUseSyntheticEmails(t *testing.T) {
}
}
// Log the domain (actionable) but never the local-part
// — a failed assertion ends up in CI logs, and the whole
// point of this guard is to keep PII out of those logs.
// Operators can grep the cassette locally to identify the
// offending row.
assert.Truef(
t,
ok,
"cassette %s contains email %q with non-synthetic domain %q; "+
"cassette %s contains an email with non-synthetic domain %q; "+
"either replace with a synthetic *.example.com address or "+
"add the domain to allowedExactDomains in cassette_safety_test.go "+
"with a justification",
filepath.Base(cassette), email, domain,
filepath.Base(cassette), domain,
)
}
})