feat: support `--post-renderer` (exec a binary) on install / upgrade / template

Description The HTTP server (including /healthz) is bound only after the first Kafka health check and the first metrics collection cycle. Health probes also share the same Kafka AdminClient as collection, so a long scrape can make /readyz flap. What happens MainVerticle.start is:…

Checklist I am able to reproduce the bug with the latest version given here: CLICK THIS LINK. I made sure that there are no existing issues - open or closed - which I could contribute my information to. I have read the FAQ and my problem isn't listed. I have taken the time to…

As of today, we don't have guardrails to protect access to the Reshapr UI and API: once a user can authenticate to the configured internal IDP, then access to Reshapr is granted with the onboarding process being triggered. We talked with enterprise users and got the feedback that…

What's wrong Three services registered in ResolvedServiceCatalog have no row in the service matrix at docs/services/index.md: controltower mwaa cloudcontrol ResolvedServiceCatalog holds 79 ServiceDescriptor entries, 77 of them with includeInStatus=true. The matrix in…