Adds a project memory for the WSP-32957 work — moving WSP's AKS cluster RBAC off AutoPerm-managed groups onto Azure PIM, and retiring AutoPerm.
The epic spans multiple sessions and has produced several findings that were expensive to establish and that contradict the Jira epic text. The most important is that production runs in the subscription named Workspace Platform Technical Preview, not the one named Workspace Platform Production — which holds no clusters. Since the PIM group names embed the subscription name, that error invalidated every production group name and object ID on the epic.
The memory carries only the facts worth not re-deriving and points at ~/code/WSP-32957-CONTINUATION.md for branch state, verified object IDs and next steps, following the pattern already used for the SIBO project.
nix fmt clean, nix flake check passes.
Adds a `project` memory for the WSP-32957 work — moving WSP's AKS cluster RBAC off AutoPerm-managed groups onto Azure PIM, and retiring AutoPerm.
The epic spans multiple sessions and has produced several findings that were expensive to establish and that contradict the Jira epic text. The most important is that production runs in the subscription named *Workspace Platform Technical Preview*, not the one named *Workspace Platform Production* — which holds no clusters. Since the PIM group names embed the subscription name, that error invalidated every production group name and object ID on the epic.
The memory carries only the facts worth not re-deriving and points at `~/code/WSP-32957-CONTINUATION.md` for branch state, verified object IDs and next steps, following the pattern already used for the SIBO project.
`nix fmt` clean, `nix flake check` passes.
Long-running epic spanning multiple sessions, with several findings that were
expensive to establish and that contradict the Jira epic text — most notably
that production runs in the subscription named "Workspace Platform Technical
Preview", not the one named "Production".
Points at ~/code/WSP-32957-CONTINUATION.md for the detail rather than carrying
it here, following the pattern used for the SIBO project.
lyrathorpe
scheduled this pull request to auto merge when all checks succeed 2026-08-24 17:54:05 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Adds a
projectmemory for the WSP-32957 work — moving WSP's AKS cluster RBAC off AutoPerm-managed groups onto Azure PIM, and retiring AutoPerm.The epic spans multiple sessions and has produced several findings that were expensive to establish and that contradict the Jira epic text. The most important is that production runs in the subscription named Workspace Platform Technical Preview, not the one named Workspace Platform Production — which holds no clusters. Since the PIM group names embed the subscription name, that error invalidated every production group name and object ID on the epic.
The memory carries only the facts worth not re-deriving and points at
~/code/WSP-32957-CONTINUATION.mdfor branch state, verified object IDs and next steps, following the pattern already used for the SIBO project.nix fmtclean,nix flake checkpasses.