Repository navigation
immutable-paths: walker should descend into oneOf/anyOf/allOf branch properties #3100
Closed as not planned
Description
What
findImmutablePaths (apps/console/src/lib/immutable-paths.ts) recognises a parent as immutable when any oneOf/anyOf/allOf branch carries the CEL rule itself, but does NOT descend into a branch's own properties to discover per-field immutability inside the branch.
Why it matters
CRDs that use allOf for property composition (less common than direct properties, but legal and present in some upstream CRDs) won't have their inner immutable fields flagged. The UI will render those fields as editable and the overlay won't protect them.
Pinned
Current behaviour is pinned by the FIXME test in apps/console/src/lib/immutable-paths.test.ts ("FIXME: does NOT walk into properties beneath oneOf/anyOf/allOf branches"). Flip the assertion when the walker is extended.
Activity
lexfrei commentedon Jul 1, 2026
Duplicate of #3101 — identical title and body (same
findImmutablePathsgap: the walker does not descend into aoneOf/anyOf/allOfbranch's ownproperties). Consolidating on #3101, which already carries the triage labels. The behaviour is still pinned by thedoes NOT walk into properties beneath oneOf/anyOf/allOf branches (pinned current behaviour)test inpackages/system/dashboard/images/console/apps/console/src/lib/immutable-paths.test.ts.github-actions commentedon Aug 31, 2026
This issue has had no activity for 60 days and was marked
lifecycle/stale.It will be closed in 14 days unless commented or labelled
lifecycle/frozen.github-actions commentedon Sep 14, 2026
Closed because no activity followed the
lifecycle/stalewarning.Reopen if the issue is still relevant.