[Feature] General configuration export and import #265

Closed
opened 2026-07-14 20:08:42 +02:00 by zemion · 1 comment
Owner

Problem / User Need

GovOPlaN needs a general configuration export/import capability beyond campaign-specific export. This should align with configuration packages and safe configuration changes.

Acceptance Criteria

  • A user/admin can export selected system or module configuration in a portable format.
  • Import supports preview/dry-run, compatibility checks, and clear conflict handling.
  • Sensitive values such as credentials and secrets are excluded or represented as unresolved references by default.
  • Import/export integrates with configuration-package safety controls where appropriate.

Notes / Decisions

This likely belongs to core/admin configuration-package work rather than an individual module.

## Problem / User Need GovOPlaN needs a general configuration export/import capability beyond campaign-specific export. This should align with configuration packages and safe configuration changes. ## Acceptance Criteria - A user/admin can export selected system or module configuration in a portable format. - Import supports preview/dry-run, compatibility checks, and clear conflict handling. - Sensitive values such as credentials and secrets are excluded or represented as unresolved references by default. - Import/export integrates with configuration-package safety controls where appropriate. ## Notes / Decisions This likely belongs to core/admin configuration-package work rather than an individual module.
zemion added the area/apicodex/readymodule/core
priority
p2
status
ready
type
feature
labels 2026-07-29 14:15:04 +02:00
Author
Owner

Verified as complete on current main through the configuration-package work.

  • govoplan_core.core.configuration_packages exposes provider-neutral portable export (ConfigurationExportSelection / ConfigurationExportResult), dry-run preflight, compatibility/conflict diagnostics, idempotent apply, and provider health checks.
  • Admin exposes authenticated catalog, dry-run, apply, and export routes under /api/v1/admin/configuration-packages/*; export accepts tenant/system scopes, selected module IDs, and object references.
  • Module-owned providers keep internals behind capabilities. Access exports roles/groups/assignments, while Mail and Files participate for their owned deployment configuration.
  • Secret material is not portable configuration: providers redact it or require bounded environment/credential-envelope references. Unsafe or unresolved values become explicit blockers/data requirements.
  • Apply integrates with configuration-change approval controls and rejects missing/unapproved change references where policy requires them.
  • Current tests cover provider discovery, missing/incompatible providers, dry-run plans, conflict behavior, secret-reference blockers, portable export, approval enforcement, and API authorization. The workspace contract, manifest, API-smoke, and full focused gates pass.
Verified as complete on current main through the configuration-package work. - `govoplan_core.core.configuration_packages` exposes provider-neutral portable export (`ConfigurationExportSelection` / `ConfigurationExportResult`), dry-run preflight, compatibility/conflict diagnostics, idempotent apply, and provider health checks. - Admin exposes authenticated catalog, dry-run, apply, and export routes under `/api/v1/admin/configuration-packages/*`; export accepts tenant/system scopes, selected module IDs, and object references. - Module-owned providers keep internals behind capabilities. Access exports roles/groups/assignments, while Mail and Files participate for their owned deployment configuration. - Secret material is not portable configuration: providers redact it or require bounded environment/credential-envelope references. Unsafe or unresolved values become explicit blockers/data requirements. - Apply integrates with configuration-change approval controls and rejects missing/unapproved change references where policy requires them. - Current tests cover provider discovery, missing/incompatible providers, dry-run plans, conflict behavior, secret-reference blockers, portable export, approval enforcement, and API authorization. The workspace contract, manifest, API-smoke, and full focused gates pass.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-core#265