fix: remove domain field with overly restrictive validation

helmfile.d/snippets/defaults.yaml

@@ -1162,4 +1162,4 @@ environments:
           aiEnabled: false
         users: []
         versions:
-          specVersion: 68
+          specVersion: 69

tests/fixtures/env/settings/versions.yaml

@@ -3,4 +3,4 @@ metadata:
     name: versions
     labels: {}
 spec:
-    specVersion: 68
+    specVersion: 69

tests/fixtures/env/teams/admin/services/hello-admin.yaml

@@ -4,7 +4,4 @@ metadata:
     labels:
         apl.io/teamId: admin
 spec:
-    auth: true
-    domain: hello.team-admin.dev.linode-apl.net
-    ownHost: true
     port: 80

tests/fixtures/env/teams/demo/services/has-cert-svc.yaml

@@ -4,6 +4,5 @@ metadata:
     labels:
         apl.io/teamId: demo
 spec:
-    hasCert: true
     paths:
         - /jeho

tests/fixtures/env/teams/demo/services/hello-auth.yaml

@@ -4,9 +4,7 @@ metadata:
     labels:
         apl.io/teamId: demo
 spec:
-    domain: tlspass.dev.linode-apl.net
     ksvc:
         predeployed: true
-    ownHost: true
     paths: []
     port: 80

tests/fixtures/env/teams/demo/services/hello-blue-green.yaml

@@ -7,7 +7,6 @@ spec:
     ingressClassName: platform
     ksvc:
         predeployed: false
-    ownHost: true
     paths: []
     port: 80
     trafficControl:

tests/fixtures/env/teams/demo/services/hello-cname.yaml

@@ -4,11 +4,9 @@ metadata:
     labels:
         apl.io/teamId: demo
 spec:
-    auth: true
     cname:
         domain: hello-demo.cname.com
-        tlsSecretName: 'hello-cert'
-    domain: hello-demo.dev.linode-apl.net
+        tlsSecretName: hello-cert
     headers:
         response:
             set:
@@ -18,7 +16,6 @@ spec:
                   value: same-origin
     ksvc:
         predeployed: true
-    ownHost: true
     port: 80
     trafficControl:
         enabled: true

tests/fixtures/env/teams/demo/services/hello.yaml

@@ -4,11 +4,9 @@ metadata:
     labels:
         apl.io/teamId: demo
 spec:
-    auth: true
     cname:
         domain: hello-demo.cname.com
-        tslSecretName: ''
-    domain: hello-demo.dev.linode-apl.net
+        tlsSecretName: "hello-crt"
     headers:
         response:
             set:
@@ -18,7 +16,6 @@ spec:
                   value: same-origin
     ksvc:
         predeployed: true
-    ownHost: true
     port: 80
     trafficControl:
         enabled: true

values-changes.yaml

@@ -494,3 +494,10 @@ changes:
   - version: 68
     deletions:
       - apps.loki.enableOpenTelemetry
+  - version: 69
+    deletions:
+      - 'teamConfig.{team}.services[].auth'
+      - 'teamConfig.{team}.services[].domain'
+      - 'teamConfig.{team}.services[].forwardPath'
+      - 'teamConfig.{team}.services[].hasCert'
+      - 'teamConfig.{team}.services[].ownHost'

values-schema.yaml

@@ -867,16 +867,6 @@ definitions:
   service:
     additionalProperties: false
     properties:
-      authz:
-        additionalProperties: false
-        description: Identifies a workload to authorize.
-        properties:
-          forwardOriginalToken:
-            default: false
-            description: If true istio will forward the bearer token instead of removing it from the headers.
-            type: boolean
-          workload:
-            $ref: '#/definitions/labelsAnnotations'
       trafficControl:
         title: Traffic Control
         description: Split traffic between multiple services (blue/green, canary)
@@ -890,21 +880,6 @@ definitions:
           weightV2:
             type: integer
             default: 10
-      certName:
-        description: The name of a TLS secret known to exist in the team namespace.
-        example: www-example-com
-        type: string
-      domain:
-        description: A custom service domain name (max 64 bytes).
-        maxLength: 64
-        $ref: '#/definitions/wordCharacterPattern'
-      forwardPath:
-        default: false
-        description: Whether to forward the path into the service, or 'terminate' it.
-        type: boolean
-      hasCert:
-        description: Select when a certificate exists and should not be generated.
-        type: boolean
       headers:
         properties:
           response:
@@ -935,48 +910,19 @@ definitions:
                   required:
                     - name
                     - value
-      hide:
-        description: Used by otomi console to determine wether to render it on screen or not. Only used by core services.
-        type: boolean
-      host:
-        description: Reference to another core service name. Used by otomi console to show a variation of a core service with a different path (i.e. Loki). Only used by core services.
-        $ref: '#/definitions/wordCharacterPattern'
-      id:
-        description: Unique identifier created by and used in API. Optional.
-        type: string
-      auth:
-        description: Available only for core apps.
-        type: boolean
-      isShared:
-        description: When true the service will get it's own domain by prefixing the app name to the cluster domain. Mostly used by core apps.
-        type: boolean
       ksvc:
         type: object
         properties:
           predeployed:
             description: Set this flag it the service is managed by knative service
             type: boolean
             default: false
-      logo:
-        description: Used by otomi-console as an override mechanism to display another logo.
-        properties:
-          name:
-            type: string
-        required:
-          - name
       name:
         $ref: '#/definitions/idName'
         description: Short name. Will be used for generation of knative service name, as well as service URL.
       namespace:
         $ref: '#/definitions/idName'
         description: A kubernetes namespace. Only used by core services, so should be disallowed for non-admins.
-      ownHost:
-        default: true
-        description: When true the service will get it's own domain by prefixing the app name to the team domain. Mostly set to true. This will probably be removed soon.
-        type: boolean
-      path:
-        description: Used by otomi-console to render a path for the app. Only used by core services.
-        $ref: '#/definitions/wordCharacterPattern'
       paths:
         items:
           description: |