Compare commits
base: eho/register-referentie:2125fb0cfd43078b2ed938f1c66576142f3e700a
eho/register-referentie:main
eho/register-referentie:docs/177-adr-labs-caddy
eho/register-referentie:ci/verify-stack-main-only
eho/register-referentie:fix/keycloak-proxy-headers
eho/register-referentie:feat/demo-otp-autofill
eho/register-referentie:fix/182-celery-concurrency
eho/register-referentie:feat/public-host-caddy
eho/register-referentie:ci/175-deploy-on-merge
eho/register-referentie:feat/177-public-tls-edge
eho/register-referentie:ci/168-helm-chart-ci-gate
eho/register-referentie:docs/169-mkdocs-nav
eho/register-referentie:feat/25-helm-kubernetes-caddy
eho/register-referentie:fix/161-e2e-bounded-and-diagnosable
eho/register-referentie:feat/162-werkbak-live-refresh
eho/register-referentie:feat/132-medewerker-mfa
eho/register-referentie:fix/156-tempo-ingester-healthcheck
eho/register-referentie:feat/153-projection-sourced-from-objecten
eho/register-referentie:feat/152-objecten-publishes-to-nrc
eho/register-referentie:feat/149-acl-writes-registerrecord
eho/register-referentie:feat/141-registerrecord-objecttype
eho/register-referentie:perf/verify-stack-uwsgi-oz-nrc
eho/register-referentie:fix/144-verify-stack-uwsgi
eho/register-referentie:feat/140-objecten-up
eho/register-referentie:feat/139-objecttypen-up
eho/register-referentie:feat/131-default-fill-crud
eho/register-referentie:chore/136-ci-job-summaries
eho/register-referentie:fix/134-verify-stack-scheduling
eho/register-referentie:feat/130-beheer-catalogi
eho/register-referentie:feat/124-metrics-dashboards
eho/register-referentie:ci/127-parallel-jobs
eho/register-referentie:feat/123-distributed-traces
eho/register-referentie:feat/111-self-service-resume
eho/register-referentie:feat/113-acl-zaaktype-by-identificatie
eho/register-referentie:fix/110-compose-local-flow
eho/register-referentie:fix/115-e2e-single-worker
eho/register-referentie:docs/111-backlog-s26
eho/register-referentie:feat/106-close-zaak-on-timeout
eho/register-referentie:feat/103-diploma-upload-documenten
eho/register-referentie:feat/102-document-wait-timeout
eho/register-referentie:feat/14-dmn-diploma-eligibility
eho/register-referentie:feat/15-beoordeling-escalation
eho/register-referentie:fix/portal-nginx-resolver
eho/register-referentie:fix/local-eventsubscriber-acl
eho/register-referentie:feat/12-withdrawal-portal
eho/register-referentie:fix/91-local-compose-parity
eho/register-referentie:feat/12-withdrawal-bff
eho/register-referentie:feat/12-withdrawal-workflow
eho/register-referentie:feat/12-withdrawal
eho/register-referentie:feat/13-behandel-portal
eho/register-referentie:feat/13-behandel-decide
eho/register-referentie:feat/13-behandel-bff-auth-werkbak
eho/register-referentie:feat/13-workflow-user-tasks
eho/register-referentie:feat/13-behandel-decision-model
eho/register-referentie:chore/release-2026.07.0
eho/register-referentie:feat/78-reference-correlation
eho/register-referentie:feat/75-approval-flow
eho/register-referentie:feat/10-openbaar-portal
eho/register-referentie:chore/73-ci-speedups
eho/register-referentie:feat/68-e2e
eho/register-referentie:feat/67-self-service-form
eho/register-referentie:feat/66-api-client
eho/register-referentie:feat/65-nx-workspace
eho/register-referentie:feat/8-bff
eho/register-referentie:feat/6-domain-service
eho/register-referentie:feat/7-event-subscriber-projection
eho/register-referentie:feat/56-nrc-notification-wiring
eho/register-referentie:test/46-acl-openzaak-integration
eho/register-referentie:feat/47-acl-mutation-baseline
eho/register-referentie:ci/30-gitea-actions-ci
eho/register-referentie:feat/5-acl-open-zaak
eho/register-referentie:feat/4-flowable
eho/register-referentie:feat/3-keycloak
eho/register-referentie:feat/2-opennotificaties
eho/register-referentie:feat/2-catalogus-seed
eho/register-referentie:feat/10-openzaak-compose
eho/register-referentie:feat/32-docs-scaffold
eho/register-referentie:feat/31-contributor-workflow
eho/register-referentie:feat/30-gitea-actions-ci
eho/register-referentie:feat/29-bff-docker-compose
eho/register-referentie:chore/remove-bootstrap-scripts
eho/register-referentie:feat/28-bff-health
eho/register-referentie:docs/split-s00
..
compare: eho/register-referentie:feat/152-objecten-publishes-to-nrc
eho/register-referentie:docs/177-adr-labs-caddy
eho/register-referentie:main
eho/register-referentie:ci/verify-stack-main-only
eho/register-referentie:fix/keycloak-proxy-headers
eho/register-referentie:feat/demo-otp-autofill
eho/register-referentie:fix/182-celery-concurrency
eho/register-referentie:feat/public-host-caddy
eho/register-referentie:ci/175-deploy-on-merge
eho/register-referentie:feat/177-public-tls-edge
eho/register-referentie:ci/168-helm-chart-ci-gate
eho/register-referentie:docs/169-mkdocs-nav
eho/register-referentie:feat/25-helm-kubernetes-caddy
eho/register-referentie:fix/161-e2e-bounded-and-diagnosable
eho/register-referentie:feat/162-werkbak-live-refresh
eho/register-referentie:feat/132-medewerker-mfa
eho/register-referentie:fix/156-tempo-ingester-healthcheck
eho/register-referentie:feat/153-projection-sourced-from-objecten
eho/register-referentie:feat/152-objecten-publishes-to-nrc
eho/register-referentie:feat/149-acl-writes-registerrecord
eho/register-referentie:feat/141-registerrecord-objecttype
eho/register-referentie:perf/verify-stack-uwsgi-oz-nrc
eho/register-referentie:fix/144-verify-stack-uwsgi
eho/register-referentie:feat/140-objecten-up
eho/register-referentie:feat/139-objecttypen-up
eho/register-referentie:feat/131-default-fill-crud
eho/register-referentie:chore/136-ci-job-summaries
eho/register-referentie:fix/134-verify-stack-scheduling
eho/register-referentie:feat/130-beheer-catalogi
eho/register-referentie:feat/124-metrics-dashboards
eho/register-referentie:ci/127-parallel-jobs
eho/register-referentie:feat/123-distributed-traces
eho/register-referentie:feat/111-self-service-resume
eho/register-referentie:feat/113-acl-zaaktype-by-identificatie
eho/register-referentie:fix/110-compose-local-flow
eho/register-referentie:fix/115-e2e-single-worker
eho/register-referentie:docs/111-backlog-s26
eho/register-referentie:feat/106-close-zaak-on-timeout
eho/register-referentie:feat/103-diploma-upload-documenten
eho/register-referentie:feat/102-document-wait-timeout
eho/register-referentie:feat/14-dmn-diploma-eligibility
eho/register-referentie:feat/15-beoordeling-escalation
eho/register-referentie:fix/portal-nginx-resolver
eho/register-referentie:fix/local-eventsubscriber-acl
eho/register-referentie:feat/12-withdrawal-portal
eho/register-referentie:fix/91-local-compose-parity
eho/register-referentie:feat/12-withdrawal-bff
eho/register-referentie:feat/12-withdrawal-workflow
eho/register-referentie:feat/12-withdrawal
eho/register-referentie:feat/13-behandel-portal
eho/register-referentie:feat/13-behandel-decide
eho/register-referentie:feat/13-behandel-bff-auth-werkbak
eho/register-referentie:feat/13-workflow-user-tasks
eho/register-referentie:feat/13-behandel-decision-model
eho/register-referentie:chore/release-2026.07.0
eho/register-referentie:feat/78-reference-correlation
eho/register-referentie:feat/75-approval-flow
eho/register-referentie:feat/10-openbaar-portal
eho/register-referentie:chore/73-ci-speedups
eho/register-referentie:feat/68-e2e
eho/register-referentie:feat/67-self-service-form
eho/register-referentie:feat/66-api-client
eho/register-referentie:feat/65-nx-workspace
eho/register-referentie:feat/8-bff
eho/register-referentie:feat/6-domain-service
eho/register-referentie:feat/7-event-subscriber-projection
eho/register-referentie:feat/56-nrc-notification-wiring
eho/register-referentie:test/46-acl-openzaak-integration
eho/register-referentie:feat/47-acl-mutation-baseline
eho/register-referentie:ci/30-gitea-actions-ci
eho/register-referentie:feat/5-acl-open-zaak
eho/register-referentie:feat/4-flowable
eho/register-referentie:feat/3-keycloak
eho/register-referentie:feat/2-opennotificaties
eho/register-referentie:feat/2-catalogus-seed
eho/register-referentie:feat/10-openzaak-compose
eho/register-referentie:feat/32-docs-scaffold
eho/register-referentie:feat/31-contributor-workflow
eho/register-referentie:feat/30-gitea-actions-ci
eho/register-referentie:feat/29-bff-docker-compose
eho/register-referentie:chore/remove-bootstrap-scripts
eho/register-referentie:feat/28-bff-health
eho/register-referentie:docs/split-s00
4
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
a5fd47e546 |
fix(infra): correlate the delivery on the object URL, not the record reference (refs #152)
CI / build (pull_request) Successful in 1m14s
CI / lint (pull_request) Successful in 1m30s
CI / unit (pull_request) Successful in 1m34s
CI / frontend (pull_request) Successful in 3m14s
CI / mutation (pull_request) Successful in 6m21s
CI / verify-stack (pull_request) Successful in 8m48s
The publish chain works — the sink received it:
{"kanaal": "objecten", "resource": "object", "kenmerken": {"objectType": "…"},
"hoofdObject": "http://objecten.local:8000/api/v2/objects/a68d4c46-…", …}
The check just looked for the wrong thing. An NRC notification carries hoofdObject /
resourceUrl and kenmerken — never the record data — so the `reference` inside the
RegisterRecord it wrote was never going to appear in the delivered message. Grep the sink
for the object URL instead, which is what identifies the write.
|
||
|
|
d76abf2df2 |
fix(infra): address Objecten by a dotted host so NRC accepts its notifications (refs #152)
CI / build (pull_request) Successful in 1m9s
CI / lint (pull_request) Successful in 1m24s
CI / unit (pull_request) Successful in 1m32s
CI / frontend (pull_request) Successful in 3m13s
CI / mutation (pull_request) Successful in 6m25s
CI / verify-stack (pull_request) Failing after 8m11s
The worker published and NRC answered 400 on every message:
{"hoofdObject":["Voer een geldige URL in."],"resourceUrl":["Voer een geldige URL in."]}
NRC types both as DRF `URLField`, and Django's URLValidator refuses a single-label host.
Objecten fills them from the object `url` DRF built with `request.build_absolute_uri` —
the Host the *caller* used — so `SITE_DOMAIN` never entered into it. Dropped that env pair;
it was a wrong guess at the mechanism.
The fix is on the caller side: keep the `objecten.local` network alias and point every
writer whose writes must be notified at it — the ACL, the gateway integration tests, and
this slice's verify driver. Readers keep the plain service name.
ADR-0029 updated with the real mechanism and the ceiling it leaves: a new writer using
`objecten:8000` gets a 201 and silently no notification.
|
||
|
|
448896206f |
feat(infra): Objecten publishes register events to NRC (refs #152)
CI / build (pull_request) Successful in 4m31s
CI / lint (pull_request) Successful in 4m46s
CI / unit (pull_request) Successful in 1m35s
CI / frontend (pull_request) Successful in 4m0s
CI / mutation (pull_request) Successful in 6m47s
CI / verify-stack (pull_request) Failing after 17m35s
Builds the four pieces ADR-0028 deliberately left absent, and turns
`NOTIFICATIONS_DISABLED` back off:
- `objecten-celery`, a worker on the Objecten image (mirrors `oz-celery`), plus
`CELERY_BROKER_URL`/`RESULT_BACKEND` on objecten-redis db 1 (db 0 is the cache).
Without it `notifications_api_common` queues the send and nothing ever ships it.
- An `nrc` service + `notifications_config` in Objecten's setup_configuration,
reusing the `big-reference-seed` credential OpenZaak publishes with.
- The `objecten` kanaal in NRC's setup_configuration — the name is fixed by the
Objects API (`NOTIFICATIONS_KANAAL`), and publishing to an unregistered kanaal is
what the failing check reported first.
- `SITE_DOMAIN: objecten.local:8000` + an `objecten.local` network alias: NRC
validates `hoofdObject`/`resourceUrl` with Django's URLValidator, which rejects a
single-label host, so `objecten:8000` is refused with "Voer een geldige URL in."
The alias keeps the dotted host resolvable so the URL still dereferences.
ADR-0029 records it; ADR-0028's ceiling now points there.
Makes `make verify-objecten-notifications` (
|
||
|
|
dc9ca2ceb2 |
test(infra): verify-objecten-notifications asserts Objecten publishes to NRC (refs #152)
Registers an abonnement on the `objecten` kanaal pointing at the existing
webhook sink, writes a RegisterRecord exactly as the ACL does on approval, and
waits for the delivery. That is the whole publish chain in one assertion:
Objecten → its celery worker → NRC → nrc-beat → the callback.
Fails today at the first hop, which is the point:
NRC POST /api/v1/abonnement → 400: {"name":"naam","code":"kanaal_naam",
"reason":"Kanaal met deze naam bestaat niet."}
Also splits S-19b (#150) into #152/#153 in BACKLOG.md — the notification wiring
and the projection re-source are independently deployable (CLAUDE.md §13).
|